Skip to content
OpenAdvisories
Critical · 10.0 CVE-2021-33796 EUVD-2021-20473GHSA-pc6c-fw6q-cfhj

In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service.

Published Jul 7, 2023 · Updated Nov 12, 2024 · Assigned by fedora

Description

In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service.

Affected products

VendorProductAffectedFixed
MuJS MuJS 1.1.1 – ≤ all —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 mujs 1.1.3-2 —
Debian 13 mujs 1.1.3-2 —
Debian 12 mujs 1.1.3-2 —

References