CVE-2019-11837

2019-05-0914:29:00

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.7%

JSON

njs through 0.3.1, used in NGINX, has a segmentation fault in String.prototype.toBytes for negative arguments, related to nxt_utf8_next in nxt/nxt_utf8.h and njs_string_offset in njs/njs_string.c.

CPENameOperatorVersion
njseq0.2.2
njseq0.2.7
njseq0.2.8
njseq0.1.12
njseq0.1.0
njseq0.2.6
njseq0.1.4
njseq0.2.3
njseq0.1.1
njseq0.1.2

Name	Operator	Version
njs	eq	0.2.2
njs	eq	0.2.7
njs	eq	0.2.8
njs	eq	0.1.12
njs	eq	0.1.0
njs	eq	0.2.6
njs	eq	0.1.4
njs	eq	0.2.3
njs	eq	0.1.1
njs	eq	0.1.2

Rows per page:

1-10 of 271

References

github.com/nginx/njs/issues/155