Lucene search

Veracode Vulnerability DatabaseVERACODE:44528

HistoryNov 30, 2023 - 8:52 p.m.

Denial Of Service (DoS)

2023-11-3020:52:35

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

quickjs vulnerability stack-overflow js_proxy_isarray application crash

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.5%

JSON

quickjs is vulnerable to Denial Of Service (DoS). The vulnerability exists due to the stack-overflow in the js_proxy_isArray component at quickjs.c, allowing an attacker to cause an application crash

CPENameOperatorVersion
quickjseq0.20210327-r0
quickjseq0.20200316-r0
quickjseq0.20201108-r1
quickjseq0.20210327-r5
quickjseq0.20210327-r2
quickjseq0.20210327-r6
quickjseq0.20210327-r3
quickjseq0.20190901-r0
quickjseq0.20200412-r0
quickjseq0.20210327-r1

Name	Operator	Version
quickjs	eq	0.20210327-r0
quickjs	eq	0.20200316-r0
quickjs	eq	0.20201108-r1
quickjs	eq	0.20210327-r5
quickjs	eq	0.20210327-r2
quickjs	eq	0.20210327-r6
quickjs	eq	0.20210327-r3
quickjs	eq	0.20190901-r0
quickjs	eq	0.20200412-r0
quickjs	eq	0.20210327-r1

Rows per page:

1-10 of 241

References

github.com/bellard/quickjs/issues/178

secdb.alpinelinux.org/edge/community.yaml

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.5%

JSON

Related for VERACODE:44528