Lucene search

GoogleOSV:CVE-2023-29458

HistoryJul 13, 2023 - 10:15 a.m.

CVE-2023-29458

2023-07-1310:15:09

Google

osv.dev

cve-2023-29458

duktape

javascript

valstack

vulnerability

3rd-party

solution

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

22.8%

JSON

Duktape is an 3rd-party embeddable JavaScript engine, with a focus on portability and compact footprint. When adding too many values in valstack JavaScript will crash. This issue occurs due to bug in Duktape 2.6 which is an 3rd-party solution that we use.

CPENameOperatorVersion
zabbixeq6.0.0beta3
zabbixeq5.0.34rc1
zabbixeq6.0.15rc1
zabbixeq5.0.27
zabbixeq5.0.15
zabbixeq5.0.0alpha2
zabbixeq6.0.11rc2
zabbixeq5.0.9rc1
zabbixeq5.0.0
zabbixeq5.0.13

Name	Operator	Version
zabbix	eq	6.0.0beta3
zabbix	eq	5.0.34rc1
zabbix	eq	6.0.15rc1
zabbix	eq	5.0.27
zabbix	eq	5.0.15
zabbix	eq	5.0.0alpha2
zabbix	eq	6.0.11rc2
zabbix	eq	5.0.9rc1
zabbix	eq	5.0.0
zabbix	eq	5.0.13

Rows per page:

1-10 of 1601

References

support.zabbix.com/browse/ZBX-22989

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

22.8%

JSON

Related for OSV:CVE-2023-29458