Cesanta MJS mjs_array_length function denial of service vulnerability

Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. Designed for microcontrollers with limited resources. The main design goals were a small footprint and simple C/C++ interoperability. A denial of service vulnerability exists in the Cesanta MJS mjsarraylength function,...

CVE-2024-35386

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsdogc function in the mjs.c file...

CVE-2024-35384

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsarraylength function in the mjs.c file...

CVE-2024-35385

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsmkffisig function in the mjs.c file...

CVE-2024-35385

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsmkffisig function in the mjs.c file...

CVE-2024-35385

Cesanta mjs version 2.20.0 is vulnerable to a denial of service (DoS) attack. The root cause is located in the mjs_mk_ffi_sig function within the mjs.c file, which relates to an out-of-bounds read (CWE-125). A remote attacker can exploit this issue to disrupt the service. As a temporary workaroun...

CVE-2024-35385

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsmkffisig function in the mjs.c file...

CVE-2024-35385

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsmkffisig function in the mjs.c file...

CVE-2024-35384

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsarraylength function in the mjs.c file...

CVE-2024-35384

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsarraylength function in the mjs.c file...

CVE-2024-35384

The Cesanta mjs embedded JavaScript engine (version 2.20.0 ) is vulnerable to a denial of service (DoS) attack. The root cause is located in the mjs_array_length function within the mjs.c file, where the software fails to properly handle incoming error messages. This vulnerability can be exploite...

CVE-2024-35384

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsarraylength function in the mjs.c file...

CVE-2024-35386

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsdogc function in the mjs.c file...

CVE-2024-35386

Cesanta mjs version 2.20.0 is vulnerable to a Denial of Service (DoS) attack. A remote attacker can exploit the mjs_do_gc function located in the mjs.c file. As a temporary workaround until a patch is released, it is recommended to disable the mjs_do_gc function . Exploitation details and specifi...

CVE-2024-35386

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsdogc function in the mjs.c file...

CVE-2024-35386

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsdogc function in the mjs.c file...

CVE-2024-35385: Out-of-bounds Read

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsmkffisig function in the mjs.c file...

Cesanta mjs 安全漏洞

Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are a small footprint and simple C / C ++ interoperability. A security vulnerability exists in Cesanta mjs version 2.20.0, which originate...

CVE-2024-35384: Improper Input Validation

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsarraylength function in the mjs.c file...

PT-2024-26472 · Cesanta · Mjs

Name of the Vulnerable Software and Affected Versions: Cesanta mjs version 2.20.0 Description: An issue in Cesanta mjs allows a remote attacker to cause a denial of service via the mjs do gc function in the mjs.c file. Recommendations: For Cesanta mjs version 2.20.0, consider disabling the mjs do...