CVE-2022-27007

2022-04-1415:15:08

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.3%

JSON

nginx njs 0.7.2 is affected suffers from Use-after-free in njs_function_frame_alloc() when it try to invoke from a restored frame saved with njs_function_frame_save().

CPENameOperatorVersion
njseq0.1.11
njseq0.3.2
njseq0.1.14
njseq0.2.3
njseq0.2.4
njseq0.1.2
njseq0.4.2
njseq0.7.2
njseq0.2.2
njseq0.5.3

Name	Operator	Version
njs	eq	0.1.11
njs	eq	0.3.2
njs	eq	0.1.14
njs	eq	0.2.3
njs	eq	0.2.4
njs	eq	0.1.2
njs	eq	0.4.2
njs	eq	0.7.2
njs	eq	0.2.2
njs	eq	0.5.3

Rows per page:

1-10 of 501

References

github.com/nginx/njs/commit/ad48705bf1f04b4221a5f5b07715ac48b3160d53

github.com/nginx/njs/issues/469

security.netapp.com/advisory/ntap-20220519-0008/