diff options
author | Neil Williams <codehelp@debian.org> | 2022-01-24 14:25:24 +0000 |
---|---|---|
committer | Neil Williams <codehelp@debian.org> | 2022-01-24 15:11:29 +0000 |
commit | 7f89890160e0cf8383e147f45ba1323fae1e4df6 (patch) | |
tree | 2035024b243cfe794151ab7ee3df6b3af3be0b80 | |
parent | 7d0c628c155894e1b0ecd376ab5c5b047e78777f (diff) |
Add new CVEs for iotjs
-rw-r--r-- | data/CVE/2022.list | 31 |
1 files changed, 24 insertions, 7 deletions
diff --git a/data/CVE/2022.list b/data/CVE/2022.list index 1388abb3f9..33dc88c6fe 100644 --- a/data/CVE/2022.list +++ b/data/CVE/2022.list @@ -2465,21 +2465,38 @@ CVE-2022-22897 CVE-2022-22896 RESERVED CVE-2022-22895 (Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via ...) - TODO: check + - iotjs <unfixed> (bug #1004298) + [buster] - iotjs <not-affected> (Vulnerable code introduced later) + NOTE: https://github.com/jerryscript-project/jerryscript/pull/4850 + NOTE: https://github.com/jerryscript-project/jerryscript/issues/4882 CVE-2022-22894 (Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_ ...) - TODO: check + - iotjs <unfixed> (bug #1004298) + NOTE: https://github.com/jerryscript-project/jerryscript/issues/4890 + NOTE: https://github.com/jerryscript-project/jerryscript/pull/4899 CVE-2022-22893 (Jerryscript 3.0.0 was discovered to contain a stack overflow via vm_lo ...) - TODO: check + - iotjs <unfixed> (bug #1004298) + NOTE: https://github.com/jerryscript-project/jerryscript/issues/4901 + NOTE: https://github.com/jerryscript-project/jerryscript/pull/4945 CVE-2022-22892 (There is an Assertion 'ecma_is_value_undefined (value) || ecma_is_valu ...) - TODO: check + - iotjs <unfixed> (bug #1004298) + [buster] - iotjs <not-affected> (Vulnerable code introduced later) + NOTE: https://github.com/jerryscript-project/jerryscript/issues/4872 + NOTE: https://github.com/jerryscript-project/jerryscript/pull/4878 CVE-2022-22891 (Jerryscript 3.0.0 was discovered to contain a SEGV vulnerability via e ...) - TODO: check + - iotjs <unfixed> (bug #1004298) + [buster] - iotjs <not-affected> (Vulnerable code introduced later) + NOTE: https://github.com/jerryscript-project/jerryscript/issues/4871 + NOTE: https://github.com/jerryscript-project/jerryscript/pull/4885 CVE-2022-22890 (There is an Assertion 'arguments_type != SCANNER_ARGUMENTS_PRESENT &am ...) - TODO: check + - iotjs <unfixed> (bug #1004298) + NOTE: https://github.com/jerryscript-project/jerryscript/pull/4849 + NOTE: https://github.com/jerryscript-project/jerryscript/issues/4847 CVE-2022-22889 RESERVED CVE-2022-22888 (Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_ ...) - TODO: check + - iotjs <unfixed> (bug #1004298) + NOTE: https://github.com/jerryscript-project/jerryscript/pull/4877 + NOTE: https://github.com/jerryscript-project/jerryscript/issues/4848 CVE-2022-22887 RESERVED CVE-2022-22886 |