Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2023-31914
CVE-2023-31914:
Homebrew vulnerability analysis and mitigation
Overview
Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an out-of-memory issue in malloc. The vulnerability was disclosed on May 12, 2023, and affects the Jerryscript JavaScript engine version 3.0.0 (NVD, GitHub Issue).
Technical details
The vulnerability has been assigned a CVSS v3.1 Base Score of 5.5 (Medium severity) with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. The issue occurs when attempting to allocate large amounts of memory through malloc, specifically when trying to allocate memory blocks of size 0x80000000 or 0x7ffffffc bytes (GitHub Issue).
Impact
The vulnerability affects the availability of the system by causing the allocator to run out of memory. When triggered, the application crashes with an AddressSanitizer error, indicating a complete denial of service. The vulnerability does not impact confidentiality or integrity of the system (NVD).
Mitigation and workarounds
The issue can be temporarily mitigated by setting allocatormayreturn_null=1, as suggested in the AddressSanitizer output. However, this is not a permanent solution to the underlying problem (GitHub Issue).
Additional resources
Source: This report was generated using AI
Related Homebrew vulnerabilities:
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management