598 matches found
CVE-2023-27729
Nginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njsvmcodereturn at src/njsvmcode.c...
CVE-2023-27730
Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njslvlhshfind at src/njslvlhsh.c...
PT-2023-7316 · Nginx · Nginx Njs
Name of the Vulnerable Software and Affected Versions: Nginx NJS version 0.7.10 Description: The issue is related to a segmentation violation via the function njs dump is recursive at src/njs vmcode.c. This is caused by a memory boundary read issue in the njs dump is recursive function of the Ngi...
CVE-2023-27727
Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njsfunctionframe at src/njsfunction.h...
CVE-2023-27728
CVE-2023-27728 affects Nginx NJS v0.7.10. The vulnerability is a segmentation fault caused by a memory boundary read in the function njs_dump_is_recursive (src/njs_vmcode.c). Impact described in multiple sources as a potential denial-of-service risk. Some connected docs suggest the issue could be...
CVE-2023-27730: Out-of-bounds Read
Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njslvlhshfind at src/njslvlhsh.c...
CVE-2023-27730
Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njslvlhshfind at src/njslvlhsh.c...
CVE-2023-27729: Improper Restriction of Operations within the Bounds of a Memory Buffer
Nginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njsvmcodereturn at src/njsvmcode.c...
CVE-2023-27729
Nginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njsvmcodereturn at src/njsvmcode.c...
CVE-2023-27729
Nginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njsvmcodereturn at src/njsvmcode.c...
CVE-2023-27729
Nginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njsvmcodereturn at src/njsvmcode.c...
CVE-2023-27728
Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njsdumpisrecursive at src/njsvmcode.c...
CVE-2023-27728
Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njsdumpisrecursive at src/njsvmcode.c...
CVE-2023-27729
Summary: CVE-2023-27729 affects Nginx NJS 0.7.10. The issue is an illegal memcpy in the function njs_vmcode_return in src/njs_vmcode.c, which can lead to a memory overflow. The CVSS 3.1 base score is 7.5 (HIGH) with NETWORK attack vector, no privileges, no user interaction, and availability impac...
CVE-2023-27727
Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njsfunctionframe at src/njsfunction.h...
CVE-2023-27727
Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njsfunctionframe at src/njsfunction.h...
CVE-2023-27727
Nginx NJS 0.7.10 is affected by a segmentation violation in njs_function_frame (src/njs_function.h). The CVE-2023-27727 entry identifies a memory-access fault that can cause a denial of service. Multiple sources corroborate the issue for NJS v0.7.10; a workaround noted in PT-2023-7315 suggests te...
AZL-25994 CVE-2020-19695 affecting package nginx for versions less than 1.22.1-5
Buffer Overflow found in Nginx NJS allows a remote attacker to execute arbitrary code via the njsobjectproperty parameter of the njs/njsvm.c function...