CVE-2020-23306

EUVD-2020-16054
There is a stack-overflow at ecma-regexp-object.c:535 in ecma_regexp_match in JerryScript 2.2.0.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 58%
Affected Products (NVD)
VendorProductVersion
jerryscriptjerryscript
2.2.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
iotjs
bionic
needed
focal
dne
groovy
ignored
hirsute
ignored
impish
ignored
jammy
needed
kinetic
dne
lunar
dne
mantic
dne
noble
dne
trusty
dne
xenial
ignored
Common Weakness Enumeration
References
https://github.com/jerryscript-project/jerryscript/issues/3753
https://github.com/jerryscript-project/jerryscript/issues/3753