CVE-2019-1010171

HIGH

jsish 2.4.83 - Denial of Service via Null Pointer Dereference in jsi_DumpFunctions

Title source: llm

Description

Jsish 2.4.83 2.0483 is affected by: Nullpointer dereference. The impact is: denial of service. The component is: function jsi_DumpFunctions (jsiEval.c:567). The attack vector is: executing crafted javascript code. The fixed version is: 2.4.84.

References (1)

Core 1

Core References

Exploit, Patch, Vendor Advisory x_refsource_confirm

https://jsish.org/fossil/jsi/tktview/a3026a7c06e0f41af461aa0bc2f7a7e886209390

Scores

CVSS v3 7.5

EPSS 0.0111

EPSS Percentile 61.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-476

Status published

Products (1)

jsish/jsish 2.4.83_2.0483

Published Jul 23, 2019

Tracked Since Feb 18, 2026