CVE-2023-30408

Published: Apr 24, 2023Modified: Feb 5, 2025

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component build/bin/jerry.

Affected (1)

Products: Jerryscript: Jerryscript

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jerryscript Jerryscript	All versions

Related CWEs

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (2)

https://github.com/jerryscript-project/jerryscript/issues/5057

Source: cve@mitre.org

ExploitIssue TrackingVendor Advisory

https://github.com/jerryscript-project/jerryscript/issues/5057

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingVendor Advisory

Timeline

No history available yet.