Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2021-42863

Опубликовано: 12 мая 2022
Источник: debian

Описание

A buffer overflow in ecma_builtin_typedarray_prototype_filter() in JerryScript version fe3a5c0 allows an attacker to construct a fake object or a fake arraybuffer with unlimited size.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
iotjsremovedpackage
iotjsnot-affectedbusterpackage

Примечания

  • https://github.com/jerryscript-project/jerryscript/issues/4793

  • https://github.com/jerryscript-project/jerryscript/pull/4794

  • https://github.com/jerryscript-project/jerryscript/commit/4e8d6344a8b5cf8f00bd3d5e869147af06d0189e

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 3 лет назад

A buffer overflow in ecma_builtin_typedarray_prototype_filter() in JerryScript version fe3a5c0 allows an attacker to construct a fake object or a fake arraybuffer with unlimited size.

CVSS3: 9.8
nvd
больше 3 лет назад

A buffer overflow in ecma_builtin_typedarray_prototype_filter() in JerryScript version fe3a5c0 allows an attacker to construct a fake object or a fake arraybuffer with unlimited size.

CVSS3: 9.8
github
больше 3 лет назад

A buffer overflow in ecma_builtin_typedarray_prototype_filter() in JerryScript version fe3a5c0 allows an attacker to construct a fake object or a fake arraybuffer with unlimited size.