CVE-2022-27007

CVE-2022-27007 affects nginx njs 0.7.2. The issue is a Use-after-free in njs_function_frame_alloc() when invoked from a restored frame saved with njs_function_frame_save() , potentially impacting confidentiality, integrity, and availability. Multiple sources corroborate the vulnerability in nginx...

CVE-2022-27008

The vulnerability CVE-2022-27008 affects nginx njs 0.7.2. A type confusion in Array.prototype.concat() when a slow array is appended to a fast array leads to a Buffer Overflow in the njs interpreter inside Nginx. This can enable a remote attacker to cause a denial of service. Practical exploitati...

CVE-2022-27008

nginx njs 0.7.2 is vulnerable to Buffer Overflow. Type confused in Array.prototype.concat when a slow array appended element is fast array...

CVE-2022-27008

nginx njs 0.7.2 is vulnerable to Buffer Overflow. Type confused in Array.prototype.concat when a slow array appended element is fast array...

CVE-2022-27008

nginx njs 0.7.2 is vulnerable to Buffer Overflow. Type confused in Array.prototype.concat when a slow array appended element is fast array...

CVE-2022-27007: Use After Free

nginx njs 0.7.2 is affected suffers from Use-after-free in njsfunctionframealloc when it try to invoke from a restored frame saved with njsfunctionframesave...

CVE-2022-27008: Buffer Copy without Checking Size of Input

nginx njs 0.7.2 is vulnerable to Buffer Overflow. Type confused in Array.prototype.concat when a slow array appended element is fast array...

PT-2022-3849 · Nginx · Nginx Njs

Name of the Vulnerable Software and Affected Versions: Nginx NJS version 0.7.3 Description: The issue is caused by a stack overflow in the njs default module loader function at /src/njs/src/njs module.c of the Nginx NJS interpreter. This could allow a remote attacker to impact the confidentiality...

PT-2022-3358

Name of the Vulnerable Software and Affected Versions Nginx NJS version 0.7.2 Description The issue is related to a buffer overflow in the njs array prototype sort function of the njs interpreter in the nginx server. This can be exploited by a remote attacker to cause a denial of service...

PT-2022-3360

Name of the Vulnerable Software and Affected Versions Nginx NJS versions prior to a fixed version, the exact version of which is not specified. Description The issue is related to a buffer overflow in the njs value own enumerate function of the njs interpreter in the Nginx server. This could allo...

PT-2022-3359

Name of the Vulnerable Software and Affected Versions Nginx NJS version 0.7.2 Description The issue is related to a segmentation violation in the njs set number function, which can be caused by insufficient input data sanitization, leading to a buffer overflow. This can potentially allow a remote...

PT-2022-2654

Name of the Vulnerable Software and Affected Versions NGINX NJS version 0.7.2 Description The issue is related to a NULL pointer dereference via the njs vmcode array component at /src/njs vmcode.c. This can potentially allow a remote attacker to cause a denial of service. Recommendations For NGIN...

PT-2022-2375 · Nginx · Nginx Njs

Name of the Vulnerable Software and Affected Versions: nginx njs version 0.7.2 Description: The issue is related to a Buffer Overflow in the Array.prototype.concat function of the njs interpreter in the nginx server. This occurs when a slow array appended element is a fast array, leading to a typ...

CVE-2022-25139

njs through 0.7.0, used in NGINX, was discovered to contain a heap use-after-free in njsawaitfulfilled...

CVE-2022-25139

njs through 0.7.0, used in NGINX, was discovered to contain a heap use-after-free in njsawaitfulfilled...

CVE-2021-46463

njs through 0.7.1, used in NGINX, was discovered to contain a control flow hijack caused by a Type Confusion vulnerability in njspromiseperformthen...

CVE-2021-46461

njs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via njsvmcodetypeof in /src/njsvmcode.c...

CVE-2021-46462

njs through 0.7.1, used in NGINX, was discovered to contain a segmentation violation via njsobjectsetprototype in /src/njsobject.c...

ALPINE-CVE-2021-46463

njs through 0.7.1, used in NGINX, was discovered to contain a control flow hijack caused by a Type Confusion vulnerability in njspromiseperformthen...

CVE-2021-46461

njs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via njsvmcodetypeof in /src/njsvmcode.c...