Lucene search

K
cve[email protected]CVE-2022-34029
HistoryJul 18, 2022 - 9:15 p.m.

CVE-2022-34029

2022-07-1821:15:07
CWE-125
web.nvd.nist.gov
52
7
cve-2022-34029
nginx
njs
v0.7.4
out-of-bounds read
njs_scope.h
security vulnerability

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

9.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.1%

Nginx NJS v0.7.4 was discovered to contain an out-of-bounds read via njs_scope_value at njs_scope.h.

Affected configurations

NVD
Node
f5njsMatch0.7.4
CPENameOperatorVersion
f5:njsf5 njseq0.7.4

Social References

More

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

9.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.1%

Related for CVE-2022-34029