CVE catalog

CVE-2021-46322

duktape: CVE-2021-46322

Severity: Medium
Published: Jan 20, 2022, 10:15:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.66% · Oct 25, 2026

Duktape v2.99.99 was discovered to contain a SEGV vulnerability via the component duk_push_tval in duktape/duk_api_stack.c.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	duktape	sid	`2.7.0-2`	fixed
Debian	duktape	forky	`2.7.0-2`	fixed
Debian	duktape	trixie	`2.7.0-2`	fixed
Debian	duktape	bookworm	`2.7.0-2`	fixed
Ubuntu	mysql-5.5	14.04	`5.5.32-0ubuntu7`	vulnerable
Ubuntu	mysql-5.5	14.04	`5.5.34-0ubuntu1`	vulnerable
Ubuntu	mysql-5.5	14.04	`5.5.34-0ubuntu2`	vulnerable
Ubuntu	mysql-5.5	14.04	`5.5.35-0ubuntu1`	vulnerable
Ubuntu	mysql-5.5	14.04	`5.5.35+dfsg-1ubuntu1`	vulnerable
Ubuntu	mysql-5.5	14.04	`5.5.37-0ubuntu0.14.04.1`	vulnerable
Ubuntu	mysql-5.5	14.04	`5.5.38-0ubuntu0.14.04.1`	vulnerable
Ubuntu	mysql-5.5	14.04	`5.5.40-0ubuntu0.14.04.1`	vulnerable
Ubuntu	mysql-5.5	14.04	`5.5.41-0ubuntu0.14.04.1`	vulnerable
Ubuntu	mysql-5.5	14.04	`5.5.43-0ubuntu0.14.04.1`	vulnerable
Ubuntu	mysql-5.5	14.04	`5.5.44-0ubuntu0.14.04.1`	vulnerable
Ubuntu	mysql-5.5	14.04	`5.5.46-0ubuntu0.14.04.2`	vulnerable
Ubuntu	mysql-5.5	14.04	`5.5.47-0ubuntu0.14.04.1`	vulnerable
Ubuntu	mysql-5.5	14.04	`5.5.49-0ubuntu0.14.04.1`	vulnerable
Ubuntu	mysql-5.5	14.04	`5.5.50-0ubuntu0.14.04.1`	vulnerable
Ubuntu	mysql-5.5	14.04	`5.5.52-0ubuntu0.14.04.1`	vulnerable
Ubuntu	mysql-5.5	14.04	`5.5.53-0ubuntu0.14.04.1`	vulnerable
Ubuntu	mysql-5.5	14.04	`5.5.54-0ubuntu0.14.04.1`	vulnerable
Ubuntu	mysql-5.5	14.04	`5.5.55-0ubuntu0.14.04.1`	vulnerable
Ubuntu	mysql-5.5	14.04	`5.5.57-0ubuntu0.14.04.1`	vulnerable
Ubuntu	mysql-5.5	14.04	`5.5.58-0ubuntu0.14.04.1`	vulnerable
Ubuntu	mysql-5.5	14.04	`5.5.59-0ubuntu0.14.04.1`	vulnerable
Ubuntu	mysql-5.5	14.04	`5.5.60-0ubuntu0.14.04.1`	vulnerable
Ubuntu	mysql-5.5	14.04	`5.5.61-0ubuntu0.14.04.1`	vulnerable
Ubuntu	mysql-5.5	14.04	`5.5.62-0ubuntu0.14.04.1`	vulnerable
Ubuntu	mariadb-10.0	16.04	`10.0.20-0ubuntu0.15.04.1`	vulnerable
Ubuntu	mariadb-10.0	16.04	`10.0.22-0ubuntu1`	vulnerable
Ubuntu	mariadb-10.0	16.04	`10.0.23-1`	vulnerable
Ubuntu	mariadb-10.0	16.04	`10.0.23-2`	vulnerable
Ubuntu	mariadb-10.0	16.04	`10.0.24-7`	vulnerable
Ubuntu	mariadb-10.0	16.04	`10.0.25-0ubuntu0.16.04.1`	vulnerable
Ubuntu	mariadb-10.0	16.04	`10.0.27-0ubuntu0.16.04.1`	vulnerable
Ubuntu	mariadb-10.0	16.04	`10.0.28-0ubuntu0.16.04.1`	vulnerable
Ubuntu	mariadb-10.0	16.04	`10.0.29-0ubuntu0.16.04.1`	vulnerable
Ubuntu	mariadb-10.0	16.04	`10.0.31-0ubuntu0.16.04.2`	vulnerable
Ubuntu	mariadb-10.0	16.04	`10.0.33-0ubuntu0.16.04.1`	vulnerable
Ubuntu	mariadb-10.0	16.04	`10.0.34-0ubuntu0.16.04.1`	vulnerable
Ubuntu	mariadb-10.0	16.04	`10.0.36-0ubuntu0.16.04.1`	vulnerable
Ubuntu	mariadb-10.0	16.04	`10.0.38-0ubuntu0.16.04.1`	vulnerable
Ubuntu	percona-server-5.6	16.04	`5.6.22-rel71.0-0ubuntu2`	vulnerable
Ubuntu	percona-server-5.6	16.04	`5.6.22-rel71.0-0ubuntu4`	vulnerable
Ubuntu	percona-server-5.6	16.04	`5.6.22-rel71.0-0ubuntu4.1`	vulnerable
Ubuntu	percona-xtradb-cluster-5.6	16.04	`5.6.21-25.8-0ubuntu2`	vulnerable
Ubuntu	percona-xtradb-cluster-5.6	16.04	`5.6.21-25.8-0ubuntu3`	vulnerable
Ubuntu	percona-xtradb-cluster-5.6	16.04	`5.6.21-25.8-0ubuntu3.1`	vulnerable
Ubuntu	percona-xtradb-cluster-5.6	16.04	`5.6.21-25.8-0ubuntu3.2`	vulnerable
Ubuntu	percona-xtradb-cluster-5.6	16.04	`5.6.34-26.19-0ubuntu0.16.04.1`	vulnerable
Ubuntu	percona-xtradb-cluster-5.6	16.04	`5.6.34-26.19-0ubuntu0.16.04.2`	vulnerable
Ubuntu	percona-xtradb-cluster-5.6	16.04	`5.6.37-26.21-0ubuntu0.16.04.1`	vulnerable
Ubuntu	percona-xtradb-cluster-5.6	16.04	`5.6.37-26.21-0ubuntu0.16.04.2`	vulnerable
Ubuntu	duktape	18.04	`2.1.1-1`	vulnerable
Ubuntu	duktape	18.04	`2.2.0-2`	vulnerable
Ubuntu	duktape	18.04	`2.2.0-3`	vulnerable
Ubuntu	mariadb-10.1	18.04	`10.1.25-1`	vulnerable
Ubuntu	mariadb-10.1	18.04	`1:10.1.29-6`	vulnerable
Ubuntu	mariadb-10.1	18.04	`1:10.1.34-0ubuntu0.18.04.1`	vulnerable
Ubuntu	mariadb-10.1	18.04	`1:10.1.38-0ubuntu0.18.04.1`	vulnerable
Ubuntu	mariadb-10.1	18.04	`1:10.1.38-0ubuntu0.18.04.2`	vulnerable
Ubuntu	mariadb-10.1	18.04	`1:10.1.40-0ubuntu0.18.04.1`	vulnerable
Ubuntu	mariadb-10.1	18.04	`1:10.1.41-0ubuntu0.18.04.1`	vulnerable
Ubuntu	mariadb-10.1	18.04	`1:10.1.43-0ubuntu0.18.04.1`	vulnerable
Ubuntu	mariadb-10.1	18.04	`1:10.1.44-0ubuntu0.18.04.1`	vulnerable
Ubuntu	mariadb-10.1	18.04	`1:10.1.47-0ubuntu0.18.04.1`	vulnerable
Ubuntu	mariadb-10.1	18.04	`1:10.1.48-0ubuntu0.18.04.1`	vulnerable
Ubuntu	duktape	20.04	`2.4.0-1`	vulnerable
Ubuntu	duktape	20.04	`2.4.0-2`	vulnerable
Ubuntu	duktape	20.04	`2.5.0-1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.17-1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.18-1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.19-1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.21-2`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.22-1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.22-1ubuntu1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.25-0ubuntu0.20.04.1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.29-0ubuntu0.20.04.1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.30-0ubuntu0.20.04.1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.31-0ubuntu0.20.04.1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.32-0ubuntu0.20.04.1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.34-0ubuntu0.20.04.1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.37-0ubuntu0.20.04.1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.38-0ubuntu0.20.04.1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.39-0ubuntu0.20.04.2`	vulnerable

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	duktape	source	sid	`2.7.0-1`	not yet assigned	Not reported	Not reported
Debian	duktape	source	forky	`2.7.0-1`	not yet assigned	Not reported	Not reported
Debian	duktape	source	trixie	`2.7.0-1`	not yet assigned	Not reported	Not reported
Debian	duktape	source	bookworm	`2.7.0-1`	not yet assigned	Not reported	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[duktape]Fixed
Details (2)
- 2.7.0-2 · amd64 · bookworm
  Fixed · Fixed: 2.7.0-1
  dsa · duktape · debian · bookworm; dsa · duktape · debian · 12
- 2.7.0-2 · arm64 · bookworm
  Fixed · Fixed: 2.7.0-1
  dsa · duktape · debian · bookworm; dsa · duktape · debian · 12
[duktape-dev]Fixed
Source package: [duktape]
Details (2)
- 2.7.0-2 · amd64 · bookworm
  Fixed · Fixed: 2.7.0-1
  dsa · duktape · debian · bookworm; dsa · duktape · debian · 12
- 2.7.0-2 · arm64 · bookworm
  Fixed · Fixed: 2.7.0-1
  dsa · duktape · debian · bookworm; dsa · duktape · debian · 12
[libduktape207]Fixed
Source package: [duktape]
Details (2)
- 2.7.0-2 · amd64 · bookworm
  Fixed · Fixed: 2.7.0-1
  dsa · duktape · debian · bookworm; dsa · duktape · debian · 12
- 2.7.0-2 · arm64 · bookworm
  Fixed · Fixed: 2.7.0-1
  dsa · duktape · debian · bookworm; dsa · duktape · debian · 12

[Debian 13 (Trixie)]

[duktape]Fixed
Source package: [duktape]
Details (2)
- 2.7.0-2+b2 · amd64 · trixie
  Fixed · Fixed: 2.7.0-1
  dsa · duktape · debian · 13
- 2.7.0-2+b2 · arm64 · trixie
  Fixed · Fixed: 2.7.0-1
  dsa · duktape · debian · 13
[duktape-dev]Fixed
Source package: [duktape]
Details (2)
- 2.7.0-2+b2 · amd64 · trixie
  Fixed · Fixed: 2.7.0-1
  dsa · duktape · debian · 13
- 2.7.0-2+b2 · arm64 · trixie
  Fixed · Fixed: 2.7.0-1
  dsa · duktape · debian · 13
[libduktape207]Fixed
Source package: [duktape]
Details (2)
- 2.7.0-2+b2 · amd64 · trixie
  Fixed · Fixed: 2.7.0-1
  dsa · duktape · debian · 13
- 2.7.0-2+b2 · arm64 · trixie
  Fixed · Fixed: 2.7.0-1
  dsa · duktape · debian · 13

Observed: Oct 23, 2026, 6:04:10 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]