An issue was discovered in ecma-helpers.c in jerryscript version 2.3.0, allows local attackers to cause a denial of service (DoS) (Null Pointer Dereference).
References
| Link | Resource |
|---|---|
| https://github.com/Aurorainfinity/Poc/tree/master/jerryscript/NULL-dereference-ecma_get_lex_env_type | Exploit Third Party Advisory |
| https://github.com/jerryscript-project/jerryscript/issues/4076 | Vendor Advisory |
| https://github.com/Aurorainfinity/Poc/tree/master/jerryscript/NULL-dereference-ecma_get_lex_env_type | Exploit Third Party Advisory |
| https://github.com/jerryscript-project/jerryscript/issues/4076 | Vendor Advisory |
Configurations
History
21 Nov 2024, 05:14
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/Aurorainfinity/Poc/tree/master/jerryscript/NULL-dereference-ecma_get_lex_env_type - Exploit, Third Party Advisory | |
| References | () https://github.com/jerryscript-project/jerryscript/issues/4076 - Vendor Advisory |
16 Aug 2023, 21:11
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Jerryscript
Jerryscript jerryscript |
|
| References | (MISC) https://github.com/jerryscript-project/jerryscript/issues/4076 - Vendor Advisory | |
| References | (MISC) https://github.com/Aurorainfinity/Poc/tree/master/jerryscript/NULL-dereference-ecma_get_lex_env_type - Exploit, Third Party Advisory | |
| CWE | CWE-476 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CPE | cpe:2.3:a:jerryscript:jerryscript:2.3.0:*:*:*:*:*:*:* |
11 Aug 2023, 15:18
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-11 14:15
Updated : 2024-11-21 05:14
NVD link : CVE-2020-24187
Mitre link : CVE-2020-24187
CVE.ORG link : CVE-2020-24187
JSON object : View
Products Affected
jerryscript
- jerryscript
CWE
CWE-476
NULL Pointer Dereference