CVE-2020-24348

2020-08-1319:15:14

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.9%

njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_json_stringify_iterator in njs_json.c.

CPENameOperatorVersion
njseq0.3.9
njseq0.2.1
njseq0.1.8
njseq0.1.7
njseq0.1.4
njseq0.1.12
njseq0.1.1
njseq0.3.6
njseq0.1.9
njseq0.3.8

Name	Operator	Version
njs	eq	0.3.9
njs	eq	0.2.1
njs	eq	0.1.8
njs	eq	0.1.7
njs	eq	0.1.4
njs	eq	0.1.12
njs	eq	0.1.1
njs	eq	0.3.6
njs	eq	0.1.9
njs	eq	0.3.8

Rows per page:

1-10 of 391

References

github.com/nginx/njs/issues/322

security.netapp.com/advisory/ntap-20200918-0001/