[Git][security-tracker-team/security-tracker][master] Add new CVEs for iotjs

[Neil Williams (@codehelp)]

Neil Williams pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7a49f9ff by Neil Williams at 2022-01-24T15:11:29+00:00
Add new CVEs for iotjs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2789,21 +2789,38 @@ CVE-2022-22897
 CVE-2022-22896
 	RESERVED
 CVE-2022-22895 (Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via ...)
-	TODO: check
+	- iotjs <unfixed> (bug #1004298)
+	[buster] - iotjs <not-affected> (Vulnerable code introduced later)
+	NOTE: https://github.com/jerryscript-project/jerryscript/pull/4850
+	NOTE: https://github.com/jerryscript-project/jerryscript/issues/4882
 CVE-2022-22894 (Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_ ...)
-	TODO: check
+	- iotjs <unfixed> (bug #1004298)
+	NOTE: https://github.com/jerryscript-project/jerryscript/issues/4890
+	NOTE: https://github.com/jerryscript-project/jerryscript/pull/4899
 CVE-2022-22893 (Jerryscript 3.0.0 was discovered to contain a stack overflow via vm_lo ...)
-	TODO: check
+	- iotjs <unfixed> (bug #1004298)
+	NOTE: https://github.com/jerryscript-project/jerryscript/issues/4901
+	NOTE: https://github.com/jerryscript-project/jerryscript/pull/4945
 CVE-2022-22892 (There is an Assertion 'ecma_is_value_undefined (value) || ecma_is_valu ...)
-	TODO: check
+	- iotjs <unfixed> (bug #1004298)
+	[buster] - iotjs <not-affected> (Vulnerable code introduced later)
+	NOTE: https://github.com/jerryscript-project/jerryscript/issues/4872
+	NOTE: https://github.com/jerryscript-project/jerryscript/pull/4878
 CVE-2022-22891 (Jerryscript 3.0.0 was discovered to contain a SEGV vulnerability via e ...)
-	TODO: check
+	- iotjs <unfixed> (bug #1004298)
+	[buster] - iotjs <not-affected> (Vulnerable code introduced later)
+	NOTE: https://github.com/jerryscript-project/jerryscript/issues/4871
+	NOTE: https://github.com/jerryscript-project/jerryscript/pull/4885
 CVE-2022-22890 (There is an Assertion 'arguments_type != SCANNER_ARGUMENTS_PRESENT &am ...)
-	TODO: check
+	- iotjs <unfixed> (bug #1004298)
+	NOTE: https://github.com/jerryscript-project/jerryscript/pull/4849
+	NOTE: https://github.com/jerryscript-project/jerryscript/issues/4847
 CVE-2022-22889
 	RESERVED
 CVE-2022-22888 (Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_ ...)
-	TODO: check
+	- iotjs <unfixed> (bug #1004298)
+	NOTE: https://github.com/jerryscript-project/jerryscript/pull/4877
+	NOTE: https://github.com/jerryscript-project/jerryscript/issues/4848
 CVE-2022-22887
 	RESERVED
 CVE-2022-22886



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7a49f9ff7701956620b1dad05de4cb3e22869717

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7a49f9ff7701956620b1dad05de4cb3e22869717
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220124/353955a2/attachment-0001.htm>