diff options
| author | Neil Williams <codehelp@debian.org> | 2022-01-24 14:25:24 +0000 |
|---|---|---|
| committer | Neil Williams <codehelp@debian.org> | 2022-01-24 15:11:29 +0000 |
| commit | c1d8b96b41c5eb282a22982cc70981f380079a37 (patch) | |
| tree | 0644ba8fc08a23a3944f7e4f8879b946881cd142 | |
| parent | c126aa68ff32765b008c8f6e2a8e1498f4cab9c5 (diff) | |
Add new CVEs for iotjs
| -rw-r--r-- | data/CVE/list.2022 | 31 |
1 files changed, 24 insertions, 7 deletions
diff --git a/data/CVE/list.2022 b/data/CVE/list.2022 index 1388abb3f9..33dc88c6fe 100644 --- a/data/CVE/list.2022 +++ b/data/CVE/list.2022 @@ -2465,21 +2465,38 @@ CVE-2022-22897 CVE-2022-22896 RESERVED CVE-2022-22895 (Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via ...) - TODO: check + - iotjs <unfixed> (bug #1004298) + [buster] - iotjs <not-affected> (Vulnerable code introduced later) + NOTE: https://github.com/jerryscript-project/jerryscript/pull/4850 + NOTE: https://github.com/jerryscript-project/jerryscript/issues/4882 CVE-2022-22894 (Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_ ...) - TODO: check + - iotjs <unfixed> (bug #1004298) + NOTE: https://github.com/jerryscript-project/jerryscript/issues/4890 + NOTE: https://github.com/jerryscript-project/jerryscript/pull/4899 CVE-2022-22893 (Jerryscript 3.0.0 was discovered to contain a stack overflow via vm_lo ...) - TODO: check + - iotjs <unfixed> (bug #1004298) + NOTE: https://github.com/jerryscript-project/jerryscript/issues/4901 + NOTE: https://github.com/jerryscript-project/jerryscript/pull/4945 CVE-2022-22892 (There is an Assertion 'ecma_is_value_undefined (value) || ecma_is_valu ...) - TODO: check + - iotjs <unfixed> (bug #1004298) + [buster] - iotjs <not-affected> (Vulnerable code introduced later) + NOTE: https://github.com/jerryscript-project/jerryscript/issues/4872 + NOTE: https://github.com/jerryscript-project/jerryscript/pull/4878 CVE-2022-22891 (Jerryscript 3.0.0 was discovered to contain a SEGV vulnerability via e ...) - TODO: check + - iotjs <unfixed> (bug #1004298) + [buster] - iotjs <not-affected> (Vulnerable code introduced later) + NOTE: https://github.com/jerryscript-project/jerryscript/issues/4871 + NOTE: https://github.com/jerryscript-project/jerryscript/pull/4885 CVE-2022-22890 (There is an Assertion 'arguments_type != SCANNER_ARGUMENTS_PRESENT &am ...) - TODO: check + - iotjs <unfixed> (bug #1004298) + NOTE: https://github.com/jerryscript-project/jerryscript/pull/4849 + NOTE: https://github.com/jerryscript-project/jerryscript/issues/4847 CVE-2022-22889 RESERVED CVE-2022-22888 (Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_ ...) - TODO: check + - iotjs <unfixed> (bug #1004298) + NOTE: https://github.com/jerryscript-project/jerryscript/pull/4877 + NOTE: https://github.com/jerryscript-project/jerryscript/issues/4848 CVE-2022-22887 RESERVED CVE-2022-22886 |