CVE-2018-11590 - Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via an integer overflow during syntax parsing

Back Back to CVE browser

MEDIUM

Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via an integer overflow during syntax parsing

Published May 31, 2018

5.5

MEDIUM

CVSS 3.0

EPSS 1.01%

Description

Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via an integer overflow during syntax parsing. This was addressed by fixing stack size detection on Linux in jsutils.c.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-190

Integer Overflow

References (3)

https://github.com/espruino/Espruino/commit/a0d7f432abee692402c00e8b615ff5982dde9780
x_refsource_MISCPatchVendor Advisory
https://github.com/espruino/Espruino/files/2019243/so_0.txt
x_refsource_MISCExploitVendor Advisory
https://github.com/espruino/Espruino/issues/1427
x_refsource_MISCIssue TrackingVendor Advisory

Link	Providers	Tags
https://github.com/espruino/Espruino/commit/a0d7f432abee692402c00e8b615ff5982dde9780		x_refsource_MISCPatchVendor Advisory
https://github.com/espruino/Espruino/files/2019243/so_0.txt		x_refsource_MISCExploitVendor Advisory
https://github.com/espruino/Espruino/issues/1427		x_refsource_MISCIssue TrackingVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 31, 2018

Updated Sep 16, 2024

Reserved May 31, 2018

Link CVE-2018-11590

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-11590

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-11590