CVE-2023-38961

Опубликовано: 21 авг. 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanner_is_context_needed component in js-scanner-until.c.

Ссылки

https://github.com/jerryscript-project/jerryscript/issues/5092
Exploit
Issue Tracking
Vendor Advisory
https://github.com/jerryscript-project/jerryscript/issues/5092
Exploit
Issue Tracking
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:jerryscript:jerryscript:3.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.06861

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVE-2023-38961

CVSS3: 9.8

ubuntu

больше 2 лет назад

Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanner_is_context_needed component in js-scanner-until.c.

CVE-2023-38961

CVSS3: 9.8

debian

больше 2 лет назад

Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0 ...

GHSA-9w63-m7q9-mjhm

CVSS3: 9.8

github

больше 2 лет назад

Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanner_is_context_needed component in js-scanner-until.c.

EPSS

Процентиль: 91%

0.06861

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-787