CVE-2021-46550: Medium severity mjs vulnerability

Published Jan 27, 2022

Updated

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via freejsonframe at src/mjsjson.c. This vulnerability can lead to a Denial of Service (DoS).

Affected Software

1 affected component

Cesanta mJS=2.20.0

Remediation

Patch Available

https://github.com/cesanta/mjs/issues/230

Event History

Jan 27, 2022

CVE Published

via MITRE·08:22 PM

Data Sourced

via MITRE·08:22 PM

Description

Frequently Asked Questions

What is CVE-2021-46550 vulnerability?

CVE-2021-46550 is a SEGV vulnerability in Cesanta MJS v2.20.0, which can be exploited via free_json_frame at src/mjs_json.c, leading to a Denial of Service (DoS) attack.

How severe is the CVE-2021-46550 vulnerability?

The severity of CVE-2021-46550 is medium, with a CVSS score of 5.5.

What software versions are affected by CVE-2021-46550 vulnerability?

Cesanta MJS v2.20.0 is the affected version by CVE-2021-46550 vulnerability.

How can CVE-2021-46550 vulnerability be exploited?

CVE-2021-46550 vulnerability can be exploited by exploiting the free_json_frame function in Cesanta MJS v2.20.0 at src/mjs_json.c.

Is there a fix available for CVE-2021-46550 vulnerability?

Currently, there is no known fix available for CVE-2021-46550 vulnerability. It is recommended to update to a fixed version when it becomes available or apply any recommended patches provided by the vendor.