CVE-2020-24346

2020-08-1319:15:13

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.6%

njs through 0.4.3, used in NGINX, has a use-after-free in njs_json_parse_iterator_call in njs_json.c.

CPENameOperatorVersion
njseq0.3.9
njseq0.2.1
njseq0.1.8
njseq0.1.7
njseq0.1.4
njseq0.1.12
njseq0.1.1
njseq0.3.6
njseq0.1.9
njseq0.3.8

Name	Operator	Version
njs	eq	0.3.9
njs	eq	0.2.1
njs	eq	0.1.8
njs	eq	0.1.7
njs	eq	0.1.4
njs	eq	0.1.12
njs	eq	0.1.1
njs	eq	0.3.6
njs	eq	0.1.9
njs	eq	0.3.8

Rows per page:

1-10 of 391

References

github.com/nginx/njs/issues/325

security.netapp.com/advisory/ntap-20200918-0001/