Code injection

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjsfficbfree at src/mjsffi.c. This vulnerability can lead to a Denial of Service DoS...

PT-2023-22311 · Cesanta · Cesanta Mjs

Name of the Vulnerable Software and Affected Versions: Cesanta MJS version 2.20.0 Description: The issue is related to a SEGV vulnerability via mjs ffi cb free at src/mjs ffi.c, which can lead to a Denial of Service DoS. Recommendations: For Cesanta MJS version 2.20.0, consider disabling the mjs...

CVE-2023-29570

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjsfficbfree at src/mjsffi.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2023-29570

CVE-2023-29570 affects Cesanta MJS v2.20.0. A SEGV vulnerability via mjs_ffi_cb_free in src/mjs_ffi.c allows Denial of Service. Exploitation details are not provided in the connected sources beyond the SEGV/DoS impact. Red Hat and other feeds corroborate the issue. A temporary workaround from PT-...

CVE-2023-29570

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjsfficbfree at src/mjsffi.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2023-2222

A vulnerability was found in binutils, where SEGV of objdump caused by READ memory access at concatfilename at dwarf2.c...

OSV-2023-316 Segv on unknown address in dwg_ref_get_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57981 Crash type: Segv on unknown address Crash state: dwgrefgetobject dwggeojsonfeature dwggeojsonobject...

CVE-2023-29569

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via fficbimplwpwwwww at src/mjsffi.c. This vulnerability can lead to a Denial of Service DoS...

Code injection

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via fficbimplwpwwwww at src/mjsffi.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2023-29569

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via fficbimplwpwwwww at src/mjsffi.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2023-29569

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via fficbimplwpwwwww at src/mjsffi.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2023-29569

CVE-2023-29569 affects Cesanta MJS v2.20.0. A SEGV/segmentation fault is triggered via ffi_cb_impl_wpwwwww in src/mjs_ffi.c, resulting in Denial of Service. Documents do not provide a patch version or explicit remediation; exploitation details are not listed.

Code injection

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gcsweep at src/mjsgc.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2023-29571

Cesanta MJS v2.20.0 is affected by a SEGV vulnerability via gc_sweep in src/mjs_gc.c, causing Denial of Service. The issue is confirmed across multiple feeds (NVD, Red Hat, CNVD, OSV, etc.). Affected component: Cesanta MJS engine; vulnerability type: segmentation fault leading to DoS; root cause:...

CVE-2023-29571

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gcsweep at src/mjsgc.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2023-29571

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gcsweep at src/mjsgc.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2023-22608

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

Denial Of Service (DoS)

Duktape is vulnerable to Denial Of Service DoS. The vulnerability exists due to the SEGV vulnerability via the component dukpushtval of dukapistack.c, allowing an attacker to cause an application crash...

OSV-2023-200 Segv on unknown address in mrb_vm_find_method

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57135 Crash type: Segv on unknown address Crash state: mrbvmfindmethod mrbvmexec mrbvmrun...

PT-2023-35715 · Git +1 · Mruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash, specifically a Segv on an unknown address. The crash state involves several function calls: mrb vm find method, mrb vm...