Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2023-38961
HistoryAug 21, 2023 - 5:15 p.m.

CVE-2023-38961

2023-08-2117:15:47
Debian Security Bug Tracker
security-tracker.debian.org
6
cve-2023-38961
buffer overflow
jerryscript
arbitrary code execution
scanner_is_context_needed
unix

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.004

Percentile

75.3%

Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanner_is_context_needed component in js-scanner-until.c.

OSVersionArchitecturePackageVersionFilename
Debian11alliotjs<= 1.0+715-1iotjs_1.0+715-1_all.deb

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.004

Percentile

75.3%

Related for DEBIANCVE:CVE-2023-38961