UBUNTU-CVE-2019-1010176

    Dashboard / Vulnerabilities / UBUNTU-CVE-2019-1010176

    UBUNTU-CVE-2019-1010176

    Published: 25 Jul 2019Last Modified: 22 Apr 2026

    Summary:

    Details: JerryScript commit 4e58ccf68070671e1fff5cd6673f0c1d5b80b166 is affected by: Buffer Overflow. The impact is: denial of service and possibly arbitrary code execution. The component is: function lit_char_to_utf8_bytes (jerry-core/lit/lit-char-helpers.c:377). The attack vector is: executing crafted javascript code. The fixed version is: after commit 505dace719aebb3308a3af223cfaa985159efae0.

    References: https://ubuntu.com/security/CVE-2019-1010176, https://github.com/jerryscript-project/jerryscript/issues/2476, https://github.com/jerryscript-project/jerryscript/commit/505dace719aebb3308a3af223cfaa985159efae0, https://www.cve.org/CVERecord?id=CVE-2019-1010176

    Affected packages

    Package

    Name: iotjs

    Purl: pkg:deb/ubuntu/[email protected]?arch=source&distro=bionic

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    1.0-1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High