Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-31916
HistoryMay 12, 2023 - 12:00 a.m.

CVE-2023-31916

2023-05-1200:00:00
ubuntu.com
ubuntu.com
6
jerryscript
assertion failure
jmem_heap_finalize
unix
cve-2023-31916

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

12.9%

Jerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion
Failure via the jmem_heap_finalize at jerry-core/jmem/jmem-heap.c.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchiotjs< anyUNKNOWN
ubuntu22.04noarchiotjs< anyUNKNOWN

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

12.9%

Related for UB:CVE-2023-31916