Jsish jsiClearStack Denial of Service Vulnerability

Jsish is a small JavaScript parser with a built-in database written in C. A denial of service vulnerability exists in Jsish v3.5.0, which stems from a failure to properly handle incoming error messages. An attacker can cause a denial of service DoS via jsiClearStack in src/jsiEval.c...

CVE-2021-46491: Undefined Security Weakness

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via JsiCommandPkgOpts at src/jsiCmds.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46508: Reachable Assertion

There is an Assertion i partscnt' failed at src/mjsbcode.c in Cesanta MJS v2.20.0...

CVE-2021-46519: Out-of-bounds Write

Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjsarraylength at src/mjsarray.c...

CVE-2021-46102: Integer Overflow or Wraparound

From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overflow bug because the sym.stvalue is read directly from ELF file without checking. If the sym.stvalue is rather large, an integer overflow is triggered while calculating the variable "addr"...

CVE-2021-46527: Out-of-bounds Write

Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjsgetcstring at src/mjsstring.c...

CVE-2021-46554: Undefined Security Weakness

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjsjsonstringify at src/mjsjson.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46500: Use After Free

Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsiArgTypeCheck in src/jsiFunc.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46507: Uncontrolled Recursion

Jsish v3.5.0 was discovered to contain a stack overflow via JsiLogMsg at src/jsiUtils.c...

CVE-2021-46499: Use After Free

Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsiValueCopyMove in src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46490: Undefined Security Weakness

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via NumberConstructor at src/jsiNumber.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46495: Use After Free

Jsish v3.5.0 was discovered to contain a heap-use-after-free via DeleteTreeValue in src/jsiObj.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46501: Use After Free

Jsish v3.5.0 was discovered to contain a heap-use-after-free via SortSubCmd in src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...

Jsish jsiValueObjDelete Denial of Service Vulnerability

Jsish is a small JavaScript parser with a built-in database written in C. A denial of service vulnerability exists in Jsish v3.5.0, which stems from a failure to properly handle incoming error messages and could lead to a denial of service DoS via a jsiValueObjDelete in src/jsiEval.c...

CVE-2021-46482

Jsish v3.5.0 was discovered to contain a heap buffer overflow via NumberConstructor at src/jsiNumber.c...

CVE-2021-46483

Jsish v3.5.0 was discovered to contain a heap buffer overflow via BooleanConstructor at src/jsiBool.c...

CVE-2021-46478

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiClearStack in src/jsiEval.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46478

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiClearStack in src/jsiEval.c. This vulnerability can lead to a Denial of Service DoS...

Heap overflow

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiArraySliceCmd in src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...

Heap overflow

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiClearStack in src/jsiEval.c. This vulnerability can lead to a Denial of Service DoS...