Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3f92-q4c5-7ppr

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow during syntax parsing because of a missing check for stack exhaustion with many '{' characters in jsparse.c.

Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow during syntax parsing because of a missing check for stack exhaustion with many '{' characters in jsparse.c.

EPSS

Процентиль: 31%
0.0012
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-674

Связанные уязвимости

CVSS3: 5.5
nvd
больше 7 лет назад

Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow during syntax parsing because of a missing check for stack exhaustion with many '{' characters in jsparse.c.

EPSS

Процентиль: 31%
0.0012
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-674