CVE-2019-1010170 - Jsish 2.4.77 2.0477 is affected by: Use After Free

Back Back to CVE browser

HIGH

Jsish 2.4.77 2.0477 is affected by: Use After Free

Published Jul 23, 2019

7.5

HIGH

CVSS 3.0

EPSS 1.11%

Description

Jsish 2.4.77 2.0477 is affected by: Use After Free. The impact is: denial of service. The component is: function Jsi_ObjFree (jsiObj.c:230). The attack vector is: executing crafted javascript code. The fixed version is: 2.4.78.

Affected products

Vendor Jsish Product Jsi Default
n/a
- Version
  2.0477 [fixed: 2.4.78]
  Status
  affected
  Constraints
  -
- Version
  2.4.77
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Jsish

Jsi

n/a

Version	Status	Constraints
2.0477 [fixed: 2.4.78]	affected	-
2.4.77	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-416

Use After Free

References (1)

https://jsish.org/fossil/jsi/tktview/870f496bb8a707491df8026e2ff78b33a5cf44c1
x_refsource_CONFIRMExploitPatchVendor Advisory

Link	Providers	Tags
https://jsish.org/fossil/jsi/tktview/870f496bb8a707491df8026e2ff78b33a5cf44c1		x_refsource_CONFIRMExploitPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner dwf

Published Jul 23, 2019

Updated Aug 5, 2024

Reserved Mar 20, 2019

Link CVE-2019-1010170

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-1010170

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-1010170