Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-30088
HistoryMay 09, 2023 - 12:00 a.m.

CVE-2023-30088

2023-05-0900:00:00
ubuntu.com
ubuntu.com
10
cesanta mjs
v1.26
local attacker
denial of service
mjs_execute function
openvlbi
vulnerable function
code
partial copy

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

32.1%

An issue found in Cesanta MJS v.1.26 allows a local attacker to cause a
denial of service via the mjs_execute function in mjs.c.

Notes

Author Note
ccdm94 openvlbi seems to contain a partial copy of the cesanta/mjs code and it includes the mentioned vulnerable function (mjs_execute).
OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchopenvlbi< anyUNKNOWN
ubuntu24.04noarchopenvlbi< anyUNKNOWN

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

32.1%

Related for UB:CVE-2023-30088