CVE-2021-46461

njs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via njsvmcodetypeof in /src/njsvmcode.c...

CVE-2021-46461

njs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via njsvmcodetypeof in /src/njsvmcode.c...

CVE-2021-46461

CVE-2021-46461 involves njs (as used in NGINX) with an out-of-bounds array access in njs_vmcode.c . The vulnerability affects njs up to version 0.7.0 and can lead to an information disclosure through a read fault in the VM code typing path. Connected sources confirm the issue exists in the njs pa...

CVE-2021-46462: Undefined Security Weakness

njs through 0.7.1, used in NGINX, was discovered to contain a segmentation violation via njsobjectsetprototype in /src/njsobject.c...

Nginx njs 资源管理错误漏洞

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from the US-based Nginx Corporation. A resource management error vulnerability exists in Nginx njs 0.7.0 and earlier versions, which stems from njs including a heap use-after-free in njsawaitfulfilled...

PT-2022-12720

Name of the Vulnerable Software and Affected Versions njs versions through 0.7.1 Description The issue is related to a segmentation violation via njs object set prototype in /src/njs object.c. This affects njs, which is used in NGINX. Recommendations For versions through 0.7.1, consider updating ...

PT-2022-17096

Name of the Vulnerable Software and Affected Versions njs versions through 0.7.0 Description A heap use-after-free issue was discovered in njs await fulfilled, affecting njs used in NGINX. Recommendations For versions through 0.7.0, consider disabling the njs await fulfilled function until a patc...

CVE-2021-46461: Improper Restriction of Operations within the Bounds of a Memory Buffer

njs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via njsvmcodetypeof in /src/njsvmcode.c...

CVE-2022-25139: Use After Free

njs through 0.7.0, used in NGINX, was discovered to contain a heap use-after-free in njsawaitfulfilled...

Nginx 安全漏洞

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from the US-based Nginx Corporation. A security vulnerability exists in Nginx, which stems from a segment violation in njsobjectsetprototype in /src/njsobject.c in njs 0.7.1 and earlier...

CVE-2021-46463: Access of Resource Using Incompatible Type

njs through 0.7.1, used in NGINX, was discovered to contain a control flow hijack caused by a Type Confusion vulnerability in njspromiseperformthen...

PT-2022-12719

Name of the Vulnerable Software and Affected Versions njs versions through 0.7.0 Description The issue is related to an out-of-bounds array access via njs vmcode typeof in /src/njs vmcode.c. This affects njs, which is used in NGINX. Recommendations For versions through 0.7.0, consider updating to...

PT-2022-12721

Name of the Vulnerable Software and Affected Versions njs versions through 0.7.1 Description A control flow hijack was discovered in njs, caused by a Type Confusion vulnerability in the njs promise perform then function. This issue affects njs used in NGINX. Recommendations For versions through...

njs:njs_process_script_fuzzer: Segv on unknown address in njs_function_lambda_call

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5334692419731456 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

njs:njs_process_script_fuzzer: Use-of-uninitialized-value in njs_utf8_decode

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=6355911919140864 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

njs:njs_process_script_fuzzer: Heap-buffer-overflow in njs_object_prop_alloc

Project: http://hg.nginx.org/njs https://github.com/nginx/njs.git Detailed Report: https://oss-fuzz.com/testcase?key=4716020565147648 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Heap-buffer-overflow READ 16...

njs:njs_process_script_fuzzer: Use-of-uninitialized-value in njs_vsprintf

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=6640632643321856 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

njs:njs_process_script_fuzzer: Crash in njs_object_prop_alloc

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5646684554788864 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61e000000c80 Crash State:...

njs:njs_process_script_fuzzer: Use-of-uninitialized-value in njs_utf8_stream_length

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=6536178223415296 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

njs:njs_process_script_fuzzer: Crash in njs_string_new

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=4691222710059008 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6180bebecbce Crash State:...