Design/Logic Flaw

2020-08-1319:15:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.6%

njs through 0.4.3, used in NGINX, has a use-after-free in njs_json_parse_iterator_call in njs_json.c.

CPENameOperatorVersion
njsle0.4.3

CPE	Name	Operator	Version
	njs	le	0.4.3

References

github.com/nginx/njs/issues/325

security.netapp.com/advisory/ntap-20200918-0001/