CVE-2018-11594 - Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow during syntax parsing of "VOID" tokens in jsparse.c

Back Back to CVE browser

MEDIUM

Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow during syntax parsing of "VOID" tokens in jsparse.c

Published May 31, 2018

5.5

MEDIUM

CVSS 3.0

EPSS 1.12%

Description

Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow during syntax parsing of "VOID" tokens in jsparse.c.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-3619
Advisory
https://github.com/espruino/Espruino/commit/c36d30529118aa049797db43f111ddad468aad29
x_refsource_MISCPatchVendor Advisory
https://github.com/espruino/Espruino/files/2022588/input.txt
x_refsource_MISCExploitVendor Advisory
https://github.com/espruino/Espruino/issues/1434
x_refsource_MISCIssue TrackingVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-3619		Advisory
https://github.com/espruino/Espruino/commit/c36d30529118aa049797db43f111ddad468aad29		x_refsource_MISCPatchVendor Advisory
https://github.com/espruino/Espruino/files/2022588/input.txt		x_refsource_MISCExploitVendor Advisory
https://github.com/espruino/Espruino/issues/1434		x_refsource_MISCIssue TrackingVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 31, 2018

Updated Sep 16, 2024

Reserved May 31, 2018

Link CVE-2018-11594

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-11594

Red Hat

No data

ENISA EUVD

Assigner mitre

Published May 31, 2018

Updated Sep 16, 2024

Link EUVD-2018-3619

GitHub

No data