Cesanta MJS Security Vulnerability

Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are a small footprint and simple C/C++ interoperability. A security vulnerability exists in Cesanta MJS version 2.20.0, which originated...

PT-2024-13742 · Cesanta · Mjs

Name of the Vulnerable Software and Affected Versions: Cesanta mjs version 2.20.0 Description: An issue in Cesanta mjs allows a remote attacker to cause a denial of service via the mjs getretvalpos function in the msj.c file. Recommendations: For Cesanta mjs version 2.20.0, consider disabling the...

PT-2024-13744 · Cesanta · Mjs

Name of the Vulnerable Software and Affected Versions: Cesanta mjs version 2.20.0 Description: An issue in Cesanta mjs allows a remote attacker to cause a denial of service via the mjs op json parse function in the msj.c file. Recommendations: For Cesanta mjs version 2.20.0, consider disabling th...

CVE-2023-49550

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs+0x4ec508 component...

Cesanta MJS Security Vulnerability

Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are a small footprint and simple C/C++ interoperability. A security vulnerability exists in Cesanta MJS version 2.20.0. A remote attacker...

CVE-2023-49549

CVE-2023-49549 affects Cesanta MJS 2.20.0. The vulnerability is due to the mjs_getretvalpos function in msj.c, enabling a remote attacker to cause a denial of service. Several feeds (NVD, Red Hat, UBUNTU, OSV, etc.) describe the impact as DoS with network access and no privileges required. Exploi...

CVE-2023-49550

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs+0x4ec508 component...

CVE-2023-49552

The CVE-2023-49552 entry concerns Cesanta mjs version 2.20.0. A vulnerability in the mjs_op_json_stringify function (msj.c) enables an Out of Bounds Write that allows a remote attacker to cause a denial of service. Several connected sources corroborate the issue and note no explicit patch/version...

CVE-2023-49551

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsopjsonparse function in the msj.c file...

CVE-2023-49552

An Out of Bounds Write in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsopjsonstringify function in the msj.c file...

PT-2024-13746 · Cesanta · Mjs

Name of the Vulnerable Software and Affected Versions: Cesanta mjs version 2.20.0 Description: An issue in Cesanta mjs allows a remote attacker to cause a denial of service via the mjs destroy function in the msj.c file. Recommendations: For Cesanta mjs version 2.20.0, consider disabling the mjs...

CVE-2023-49549

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsgetretvalpos function in the msj.c file...

CVE-2023-49551

CVE-2023-49551 affects Cesanta mjs 2.20.0. The vulnerability exists in the mjs_op_json_parse function within msj.c and enables a remote attacker to cause a denial of service. Documented impact is network-based with a high severity (CVSS v3.1: 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Connected s...

CVE-2023-49549

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsgetretvalpos function in the msj.c file...

CVE-2023-49551

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsopjsonparse function in the msj.c file...

Cesanta MJS 安全漏洞

Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. Designed for microcontrollers with limited resources. The main design goals were a small footprint and simple C/C++ interoperability. Cesanta MJS has a denial of service vulnerability that can be exploited by an attacker...

Cesanta MJS 安全漏洞

Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. A denial of service vulnerability exists in Cesanta MJS version 2.20.0, which is caused by a flaw in the mjs+0x4ec508 component. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2023-49553

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsdestroy function in the msj.c file...

CVE-2023-49550

Cesanta mjs 2.20.0 contains a denial‑of‑service vulnerability in the mjs+0x4ec508 component. A remote attacker could trigger DoS over the network with no user interaction. Affected version: 2.20.0. No remediation or patch information is provided in the connected documents.

CVE-2023-49553

CVE-2023-49553 affects Cesanta mjs 2.20.0. The issue is in the mjs_destroy function of msj.c and allows a remote attacker to cause a denial of service. Exploitation is indicated as remote via a network attack, with no user interaction required. Multiple connected sources (Red Hat, UBUNTU, OSV, NV...