Lucene search
HistoryJul 26, 2022 - 1:15 p.m.
CVE-2021-33438
cve-2021-33438
mjs
restricted javascript engine
es6
stack buffer overflow
json_parse_array
mjs.c
nvd
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
5.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
44.5%
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow in json_parse_array() in mjs.c.
Affected configurations
Node
cesantamjsRange<2.20.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| cesanta:mjs | cesanta mjs | lt | 2.20.0 |
Related
nvd
nvd
CVE-2021-33438
2022-07-26 13:15:08
prion
prion
Stack overflow
2022-07-26 13:15:00
osv
osv
CVE-2021-33438
2022-07-26 13:15:08
cvelist
cvelist
CVE-2021-33438
2022-07-26 12:09:09
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
5.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
44.5%
Related for CVE-2021-33438