Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-29458

Опубликовано: 13 июл. 2023
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.5

Описание

Duktape is an 3rd-party embeddable JavaScript engine, with a focus on portability and compact footprint. When adding too many values in valstack JavaScript will crash. This issue occurs due to bug in Duktape 2.6 which is an 3rd-party solution that we use.

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

needs-triage

esm-apps-legacy/xenial

not-affected

code not present
esm-apps/bionic

not-affected

code not present
esm-apps/focal

not-affected

code not present
esm-apps/jammy

needed

esm-apps/resolute

needs-triage

esm-apps/xenial

not-affected

code not present
esm-infra-legacy/trusty

not-affected

code not present
focal

not-affected

code not present

Показывать по

EPSS

Процентиль: 55%
0.00758
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
nvd
больше 3 лет назад

Duktape is an 3rd-party embeddable JavaScript engine, with a focus on portability and compact footprint. When adding too many values in valstack JavaScript will crash. This issue occurs due to bug in Duktape 2.6 which is an 3rd-party solution that we use.

CVSS3: 7.5
debian
больше 3 лет назад

Duktape is an 3rd-party embeddable JavaScript engine, with a focus on ...

CVSS3: 5.9
github
больше 3 лет назад

Duktape is an 3rd-party embeddable JavaScript engine, with a focus on portability and compact footprint. When adding too many values in valstack JavaScript will crash. This issue occurs due to bug in Duktape 2.6 which is an 3rd-party solution that we use.

CVSS3: 7.5
fstec
больше 3 лет назад

Уязвимость компонента Duktape универсальной системы мониторинга Zabbix, связанная с непроверенным индексированием массива, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
altlinux
больше 3 лет назад

ALT-PU-2023-8849: package `zabbix` update to version 6.0.18-alt1

EPSS

Процентиль: 55%
0.00758
Низкий

7.5 High

CVSS3