Buffer Overflow Vulnerability in Cesanta mJS Software
CVE-2021-36535

5.5MEDIUM

Key Information:

Vendor

Cesanta

Status
Mjs
Vendor
CVE Published:
3 February 2023

What is CVE-2021-36535?

The mJS software, developed by Cesanta, is susceptible to a buffer overflow vulnerability that can be exploited by remote attackers. By sending specially crafted JavaScript (.js) files to the mjs_set_errorf function, an attacker can trigger a denial of service, impacting the functionality and availability of the affected system. This vulnerability underscores the importance of secure coding practices and robust error handling to mitigate potential exploits.

References

https://github.com/cesanta/mjs/issues/175

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.