exploitDog

CVE-2023-29570

Опубликовано: 24 апр. 2023

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_ffi_cb_free at src/mjs_ffi.c. This vulnerability can lead to a Denial of Service (DoS).

Ссылки

https://github.com/cesanta/mjs/issues/240
Exploit
Issue Tracking
Third Party Advisory
https://github.com/z1r00/fuzz_vuln/blob/main/mjs/SEGV/mjs_fii2/readme.md
Exploit
Third Party Advisory
https://github.com/cesanta/mjs/issues/240
Exploit
Issue Tracking
Third Party Advisory
https://github.com/z1r00/fuzz_vuln/blob/main/mjs/SEGV/mjs_fii2/readme.md
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cesanta:mjs:2.20.0:*:*:*:*:*:*:*

EPSS

Процентиль: 6%

0.00023

Низкий

5.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-770

Связанные уязвимости

GHSA-qmx9-67mw-5ghq

CVSS3: 5.5

github

почти 3 года назад

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_ffi_cb_free at src/mjs_ffi.c. This vulnerability can lead to a Denial of Service (DoS).

EPSS

Процентиль: 6%

0.00023

Низкий

5.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-770