CVE-2023-29571

Опубликовано: 12 апр. 2023

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_sweep at src/mjs_gc.c. This vulnerability can lead to a Denial of Service (DoS).

Ссылки

https://github.com/cesanta/mjs/issues/241
Exploit
Issue Tracking
Third Party Advisory
https://github.com/z1r00/fuzz_vuln/blob/main/mjs/SEGV/mjs_gc/readme.md
Exploit
Third Party Advisory
https://github.com/cesanta/mjs/issues/241
Exploit
Issue Tracking
Third Party Advisory
https://github.com/z1r00/fuzz_vuln/blob/main/mjs/SEGV/mjs_gc/readme.md
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cesanta:mjs:2.20.0:*:*:*:*:*:*:*

EPSS

Процентиль: 11%

0.00037

Низкий

5.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-119

Связанные уязвимости

CVE-2023-29571

CVSS3: 5.5

ubuntu

почти 3 года назад

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_sweep at src/mjs_gc.c. This vulnerability can lead to a Denial of Service (DoS).

GHSA-pw32-jj49-66pq

CVSS3: 5.5

github

почти 3 года назад

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_sweep at src/mjs_gc.c. This vulnerability can lead to a Denial of Service (DoS).

EPSS

Процентиль: 11%

0.00037

Низкий

5.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-119