CVE-2021-46509: Uncontrolled Recursion

Cesanta MJS v2.20.0 was discovered to contain a stack overflow via snquote at mjs/src/mjsjson.c...

CVE-2021-46508: Reachable Assertion

There is an Assertion i partscnt' failed at src/mjsbcode.c in Cesanta MJS v2.20.0...

CVE-2021-46510: Reachable Assertion

There is an Assertion s ownedstrings.buf + mjs-ownedstrings.len' failed at src/mjsgc.c in Cesanta MJS v2.20.0...

CVE-2021-46534: Undefined Security Weakness

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via getpropbuiltinforeign at src/mjsexec.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46511: Reachable Assertion

There is an Assertion m-len = sizeofv' failed at src/mjscore.c in Cesanta MJS v2.20.0...

CVE-2021-46525: Use After Free

Cesanta MJS v2.20.0 was discovered to contain a heap-use-after-free via mjsapply at src/mjsexec.c...

PT-2022-12768

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description A heap buffer overflow issue was discovered in Cesanta MJS via the to json or debug function at mjs/src/mjs json.c. This issue can be exploited, potentially leading to unintended consequences...

Cesanta MJS security vulnerabilities

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland. cesanta MJS denial of service vulnerability can be exploited by attackers to cause a denial of service...

PT-2022-12785

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description The issue is related to a SEGV vulnerability via mjs print at src/mjs builtin.c, which can lead to a Denial of Service DoS. Recommendations For Cesanta MJS version 2.20.0, at the moment, there is no...

PT-2022-12756

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description The issue is related to an assertion failure in the Cesanta MJS software. Specifically, the assertion m-len = sizeofv failed at the file src/mjs core.c. Recommendations For Cesanta MJS version 2.20.0, at...

PT-2022-12782

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description A SEGV issue was found in Cesanta MJS, which can cause a Denial of Service DoS. The issue is related to the "/lib/x86 64-linux-gnu/libc.so.6+0x45a1f" endpoint. Recommendations For version 2.20.0, at the...

PT-2022-12795

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description The issue is related to a SEGV vulnerability via mjs json stringify at src/mjs json.c, which can lead to a Denial of Service DoS. Recommendations For Cesanta MJS version 2.20.0, consider disabling the mjs...

PT-2022-12781

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description A SEGV issue was found in Cesanta MJS via the gc compact strings function at src/mjs gc.c, which can cause a Denial of Service DoS. Recommendations For version 2.20.0, consider disabling the gc compact...

PT-2022-12783

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description A SEGV issue was found in Cesanta MJS via the mjs get mjs function at src/mjs builtin.c, which can cause a Denial of Service DoS. Recommendations For version 2.20.0, consider disabling the mjs get mjs...

PT-2022-12775

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description The issue is related to a SEGV vulnerability via mjs execute at src/mjs exec.c, which can lead to a Denial of Service DoS. Recommendations For Cesanta MJS version 2.20.0, at the moment, there is no...

PT-2022-12755

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description An assertion failure occurred at src/mjs gc.c in Cesanta MJS due to the condition s owned strings.buf + mjs-owned strings.len not being met. Recommendations For Cesanta MJS version 2.20.0, at the moment,...

PT-2022-12780

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description The issue is related to a SEGV vulnerability that can be triggered via the /usr/local/bin/mjs+0x9a30e endpoint, leading to a Denial of Service DoS. Recommendations For Cesanta MJS version 2.20.0, at the...

CVE-2021-46537: Undefined Security Weakness

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x9a30e. This vulnerability can lead to a Denial of Service DoS...

PT-2022-12796

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description The issue is related to a SEGV vulnerability via mjs bcode insert offset at src/mjs bcode.c, which can lead to a Denial of Service DoS. Recommendations For Cesanta MJS version 2.20.0, consider disabling t...

Cesanta MJS security vulnerabilities

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are small footprint and simple C/C interoperability.Cesanta MJS has a security vulnerability that could be exploited by an attacker to cause...