Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2023-28445

Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Resizable ArrayBuffers passed to asynchronous functions that are shrunk during the asynchronous operation could result in an out-of-bound read/write. It is unlikely that this has been exploited in the wild, as the only version affected is Deno 1.32.0. Deno Deploy users are not affected. The problem has been resolved by disabling resizable ArrayBuffers temporarily in Deno 1.32.1. Deno 1.32.2 will re-enable resizable ArrayBuffers with a proper fix. As a workaround, run with `--v8-flags=--no-harmony-rab-gsab` to disable resizable ArrayBuffers.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.4%
CVSS Severity
CVSS v3 Score 9.9
Products affected by CVE-2023-28445
  • Deno » Deno » Version: 1.32.0
    cpe:2.3:a:deno:deno:1.32.0
  • Deno » Deno Runtime » Version: 0.102.0
    cpe:2.3:a:deno:deno_runtime:0.102.0
  • Deno » Serde V8 » Version: 0.87.0
    cpe:2.3:a:deno:serde_v8:0.87.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved