Information on source package iotjs

Available versions

ReleaseVersion
buster1.0-1
bullseye1.0+715-1

Open issues

BugbusterbullseyeDescription
CVE-2023-38961vulnerable (no DSA, ignored)vulnerable (no DSA, ignored)Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0 ...
CVE-2023-36201vulnerable (no DSA, ignored)vulnerable (no DSA, ignored)An issue in JerryscriptProject jerryscript v.3.0.0 allows an attacker ...
CVE-2023-36109vulnerable (no DSA, ignored)vulnerable (no DSA, ignored)Buffer Overflow vulnerability in JerryScript version 3.0, allows remot ...
CVE-2023-34868vulnerable (no DSA, ignored)vulnerable (no DSA, ignored)Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertio ...
CVE-2023-34867vulnerable (no DSA, ignored)vulnerable (no DSA, ignored)Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertio ...
CVE-2023-31920vulnerable (no DSA, ignored)vulnerable (no DSA, ignored)Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertio ...
CVE-2023-31919vulnerable (no DSA, ignored)vulnerable (no DSA, ignored)Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertio ...
CVE-2023-31918vulnerable (no DSA, ignored)vulnerable (no DSA, ignored)Jerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertio ...
CVE-2023-31916vulnerable (no DSA, ignored)vulnerable (no DSA, ignored)Jerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertio ...
CVE-2023-31914vulnerable (no DSA, ignored)vulnerable (no DSA, ignored)Jerryscript 3.0 (commit 05dbbd1) was discovered to contain out-of-memo ...
CVE-2023-31913vulnerable (no DSA, ignored)vulnerable (no DSA, ignored)Jerryscript 3.0 *commit 1a2c047) was discovered to contain an Assertio ...
CVE-2023-31910vulnerable (no DSA, ignored)vulnerable (no DSA, ignored)Jerryscript 3.0 (commit 05dbbd1) was discovered to contain a heap-buff ...
CVE-2023-31908vulnerable (no DSA, ignored)vulnerable (no DSA, ignored)Jerryscript 3.0 (commit 05dbbd1) was discovered to contain a heap-buff ...
CVE-2023-31907vulnerable (no DSA, ignored)vulnerable (no DSA, ignored)Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via ...
CVE-2023-31906vulnerable (no DSA, ignored)vulnerable (no DSA, ignored)Jerryscript 3.0.0(commit 1a2c047) was discovered to contain a heap-buf ...
CVE-2023-30414vulnerable (no DSA, ignored)vulnerable (no DSA, ignored)Jerryscript commit 1a2c047 was discovered to contain a stack overflow ...
CVE-2023-30410vulnerable (no DSA, ignored)vulnerable (no DSA, ignored)Jerryscript commit 1a2c047 was discovered to contain a stack overflow ...
CVE-2023-30408vulnerable (no DSA, ignored)vulnerable (no DSA, ignored)Jerryscript commit 1a2c047 was discovered to contain a segmentation vi ...
CVE-2023-30406vulnerable (no DSA, ignored)vulnerable (no DSA, ignored)Jerryscript commit 1a2c047 was discovered to contain a segmentation vi ...
CVE-2022-22895fixedvulnerable (no DSA)Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via ...
CVE-2022-22894vulnerable (no DSA)vulnerable (no DSA)Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_ ...
CVE-2022-22893vulnerable (no DSA)vulnerable (no DSA)Jerryscript 3.0.0 was discovered to contain a stack overflow via vm_lo ...
CVE-2022-22892fixedvulnerable (no DSA)There is an Assertion 'ecma_is_value_undefined (value) || ecma_is_valu ...
CVE-2022-22891fixedvulnerable (no DSA)Jerryscript 3.0.0 was discovered to contain a SEGV vulnerability via e ...
CVE-2022-22890fixedvulnerable (no DSA)There is an Assertion 'arguments_type != SCANNER_ARGUMENTS_PRESENT && ...
CVE-2022-22888fixedvulnerable (no DSA)Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_ ...
CVE-2021-46349fixedvulnerable (no DSA)There is an Assertion 'type == ECMA_OBJECT_TYPE_GENERAL || type == ECM ...
CVE-2021-46348fixedvulnerable (no DSA)There is an Assertion 'ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p)' fa ...
CVE-2021-46346vulnerable (no DSA)vulnerable (no DSA)There is an Assertion 'local_tza == ecma_date_local_time_zone_adjustme ...
CVE-2021-46340fixedvulnerable (no DSA)There is an Assertion 'context_p->stack_top_uint8 == SCAN_STACK_TRY_ST ...
CVE-2021-46338vulnerable (no DSA)vulnerable (no DSA)There is an Assertion 'ecma_is_lexical_environment (object_p)' failed ...
CVE-2021-46170vulnerable (no DSA)vulnerable (no DSA)An issue was discovered in JerryScript commit a6ab5e9. There is an Use ...
CVE-2021-43453vulnerable (no DSA)vulnerable (no DSA)A Heap-based Buffer Overflow vulnerability exists in JerryScript 2.4.0 ...
CVE-2021-42863fixedvulnerable (no DSA)A buffer overflow in ecma_builtin_typedarray_prototype_filter() in Jer ...
CVE-2021-41959vulnerable (no DSA)vulnerable (no DSA)JerryScript Git version 14ff5bf does not sufficiently track and releas ...
CVE-2021-41751vulnerable (no DSA)vulnerable (no DSA)Buffer overflow vulnerability in file ecma-builtin-array-prototype.c:9 ...
CVE-2021-41683vulnerable (no DSA)vulnerable (no DSA)There is a stack-overflow at ecma-helpers.c:326 in ecma_get_lex_env_ty ...
CVE-2021-41682vulnerable (no DSA)vulnerable (no DSA)There is a heap-use-after-free at ecma-helpers-string.c:1940 in ecma_c ...
CVE-2021-26199vulnerable (no DSA)vulnerable (no DSA)An issue was discovered in JerryScript 2.4.0. There is a heap-use-afte ...
CVE-2021-26198vulnerable (no DSA)vulnerable (no DSA)An issue was discovered in JerryScript 2.4.0. There is a SEVG in ecma_ ...
CVE-2021-26197vulnerable (no DSA)vulnerable (no DSA)An issue was discovered in JerryScript 2.4.0. There is a SEGV in main_ ...
CVE-2021-26195vulnerable (no DSA)vulnerable (no DSA)An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-o ...
CVE-2021-26194vulnerable (no DSA)vulnerable (no DSA)An issue was discovered in JerryScript 2.4.0. There is a heap-use-afte ...
CVE-2020-24344vulnerable (no DSA)vulnerable (no DSA)JerryScript through 2.3.0 has a (function({a=arguments}){const argumen ...
CVE-2020-24187vulnerable (no DSA, ignored)vulnerable (no DSA, ignored)An issue was discovered in ecma-helpers.c in jerryscript version 2.3.0 ...
CVE-2020-23323vulnerable (no DSA)vulnerable (no DSA)There is a heap-buffer-overflow at re-parser.c in re_parse_char_escape ...
CVE-2020-23322vulnerable (no DSA)vulnerable (no DSA)There is an Assertion in 'context_p->token.type == LEXER_RIGHT_BRACE | ...
CVE-2020-23321vulnerable (no DSA)vulnerable (no DSA)There is a heap-buffer-overflow at lit-strings.c:431 in lit_read_code_ ...
CVE-2020-23320vulnerable (no DSA)vulnerable (no DSA)There is an Assertion in 'context_p->next_scanner_info_p->type == SCAN ...
CVE-2020-23319vulnerable (no DSA)vulnerable (no DSA)There is an Assertion in '(flags >> CBC_STACK_ADJUST_SHIFT) >= CBC_STA ...
CVE-2020-23314vulnerable (no DSA)vulnerable (no DSA)There is an Assertion 'block_found' failed at js-parser-statm.c:2003 p ...
CVE-2020-23313vulnerable (no DSA)vulnerable (no DSA)There is an Assertion 'scope_stack_p > context_p->scope_stack_p' faile ...
CVE-2020-23312vulnerable (no DSA)vulnerable (no DSA)There is an Assertion 'context.status_flags & PARSER_SCANNING_SUCCESSF ...
CVE-2020-23311vulnerable (no DSA)vulnerable (no DSA)There is an Assertion 'context_p->token.type == LEXER_RIGHT_BRACE || c ...
CVE-2020-23310vulnerable (no DSA)vulnerable (no DSA)There is an Assertion 'context_p->next_scanner_info_p->type == SCANNER ...
CVE-2020-23309vulnerable (no DSA)vulnerable (no DSA)There is an Assertion 'context_p->stack_depth == context_p->context_st ...
CVE-2020-23308vulnerable (no DSA)vulnerable (no DSA)There is an Assertion 'context_p->stack_top_uint8 == LEXER_EXPRESSION_ ...
CVE-2020-23306vulnerable (no DSA)vulnerable (no DSA)There is a stack-overflow at ecma-regexp-object.c:535 in ecma_regexp_m ...
CVE-2020-23303vulnerable (no DSA)vulnerable (no DSA)There is a heap-buffer-overflow at jmem-poolman.c:165 in jmem_pools_co ...
CVE-2020-23302vulnerable (no DSA)vulnerable (no DSA)There is a heap-use-after-free at ecma-helpers-string.c:772 in ecma_re ...
CVE-2020-13649vulnerable (no DSA)fixedparser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during c ...
CVE-2019-1010176vulnerable (no DSA)fixedJerryScript commit 4e58ccf68070671e1fff5cd6673f0c1d5b80b166 is affecte ...
CVE-2018-1000636vulnerable (no DSA)fixedJerryScript version Tested on commit f86d7459d195c8ba58479d1861b0cc726 ...
CVE-2018-11419vulnerable (no DSA)fixedAn issue was discovered in JerryScript 1.0. There is a heap-based buff ...
CVE-2018-11418vulnerable (no DSA)fixedAn issue was discovered in JerryScript 1.0. There is a heap-based buff ...
CVE-2017-18212vulnerable (no DSA)fixedAn issue was discovered in JerryScript 1.0. There is a heap-based buff ...
CVE-2017-14749vulnerable (no DSA)fixedJerryScript 1.0 allows remote attackers to cause a denial of service ( ...

Open unimportant issues

BugbusterbullseyeDescription
CVE-2020-29657vulnerablevulnerableIn JerryScript 2.3.0, there is an out-of-bounds read in main_print_unh ...

Resolved issues

BugDescription
CVE-2023-31921Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertio ...
CVE-2022-32117Jerryscript v2.4.0 was discovered to contain a stack buffer overflow v ...
CVE-2022-22901There is an Assertion in 'context_p->next_scanner_info_p->type == SCAN ...
CVE-2021-46351There is an Assertion 'local_tza == ecma_date_local_time_zone_adjustme ...
CVE-2021-46350There is an Assertion 'ecma_is_value_object (value)' failed at jerrysc ...
CVE-2021-46347There is an Assertion 'ecma_object_check_class_name_is_object (obj_p)' ...
CVE-2021-46345There is an Assertion 'cesu8_cursor_p == cesu8_end_p' failed at /jerry ...
CVE-2021-46344There is an Assertion 'flags & PARSER_PATTERN_HAS_REST_ELEMENT' failed ...
CVE-2021-46343There is an Assertion 'context_p->token.type == LEXER_LITERAL' failed ...
CVE-2021-46342There is an Assertion 'ecma_is_lexical_environment (obj_p) || !ecma_op ...
CVE-2021-46337There is an Assertion 'page_p != NULL' failed at /parser/js/js-parser- ...
CVE-2021-46336There is an Assertion 'opts & PARSER_CLASS_LITERAL_CTOR_PRESENT' faile ...
CVE-2021-44994There is an Assertion ''JERRY_CONTEXT (jmem_heap_allocated_size) == 0' ...
CVE-2021-44993There is an Assertion ''ecma_is_value_boolean (base_value)'' failed at ...
CVE-2021-44992There is an Assertion ''ecma_object_is_typedarray (obj_p)'' failed at ...
CVE-2021-44988Jerryscript v3.0.0 and below was discovered to contain a stack overflo ...
CVE-2020-22597An issue in Jerrscript- project Jerryscrip v. 2.3.0 allows a remote at ...
CVE-2020-14163An issue was discovered in ecma/operations/ecma-container-object.c in ...
CVE-2020-13991vm/opcodes.c in JerryScript 2.2.0 allows attackers to hijack the flow ...
CVE-2020-13623JerryScript 2.2.0 allows attackers to cause a denial of service (stack ...
CVE-2020-13622JerryScript 2.2.0 allows attackers to cause a denial of service (asser ...

Search for package or bug name: Reporting problems