Lucene search

K
cve[email protected]CVE-2024-32672
HistoryMay 14, 2024 - 3:36 p.m.

CVE-2024-32672

2024-05-1415:36:53
CWE-787
CWE-20
web.nvd.nist.gov
3
samsung
escargot
segmentation fault
javascript engine
denial of service
remote attackers
crafted input
escargot 4.0.0
nvd

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

A Segmentation Fault issue discovered in

Samsung Open Source Escargot JavaScript engine

allows remote attackers to cause a denial of service via crafted input.

This issue affects Escargot: 4.0.0.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "packageName": "JavaScript engine",
    "product": "Escargot",
    "repo": "https://github.com/Samsung/escargot/",
    "vendor": "Samsung Open Source",
    "versions": [
      {
        "status": "affected",
        "version": "4.0.0"
      }
    ]
  }
]

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CVE-2024-32672