Lucene search

MitreCVE-2021-33439

HistoryJul 26, 2022 - 1:15 p.m.

CVE-2021-33439

2022-07-2613:15:08

CWE-190

CWE-476

mitre

web.nvd.nist.gov

mjs

javascript engine

es6

integer overflow

security

vulnerability

nvd

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

46.0%

JSON

An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is Integer overflow in gc_compact_strings() in mjs.c.

Affected configurations

Nvd

Node

cesantamjsRange<2.20.0

VendorProductVersionCPE
cesantamjs*cpe:2.3:a:cesanta:mjs:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cesanta	mjs	*	cpe:2.3:a:cesanta:mjs::::::::

References

gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d

github.com/cesanta/mjs/issues/159

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

46.0%

JSON

Related for CVE-2021-33439