Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2023-29458

Duktape 2.6 bug crashes JavaScript putting too many values in valstack.

Description

Duktape is an 3rd-party embeddable JavaScript engine, with a focus on portability and compact footprint. When adding too many values in valstack JavaScript will crash. This issue occurs due to bug in Duktape 2.6 which is an 3rd-party solution that we use.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zabbix Zabbix

Default version status: affected

  • 5,0,0 to ≤ 5.0.34affected
  • 6,0,0 to ≤ 6.0.17affected
  • 6.4.0 to ≤ 6.4.2affected
  • 7.0.0alpha1 to ≤ 7.0.0alpha1 affected

References