njs:njs_process_script_fuzzer: Bad-cast to njs_value_t' (aka 'union njs_value_s')njs_vmcode_interpreter in njs_function_lambda_call

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=4779964628205568 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerubsannjs Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000002b16660 Crash State: Bad-cast t...

njs:njs_process_script_fuzzer: Use-of-uninitialized-value in njs_vsprintf

Detailed Report: https://oss-fuzz.com/testcase?key=5124165974884352 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: njsvsprintf njserrorfmtnew...

njs:njs_process_script_fuzzer: Heap-buffer-overflow in njs_string_prototype_split

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5647502740291584 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x625000048100 Crash...

NGINX NJS Heap-Based Buffer Overflow (CVE-2019-12208)

A buffer overflow vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

NGINX NJS Heap-Based Buffer Overflow (CVE-2019-12207)

A heap-based buffer overflow vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

NGINX NJS Heap-Based Buffer Overflow (CVE-2019-12206)

A buffer overflow vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

NGINX NJS Heap-Based Buffer Overflow (CVE-2019-11839)

A buffer overflow vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

NGINX NJS Heap-Based Buffer Overflow (CVE-2019-11838)

A buffer overflow vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

NGINX NJS Denial of Service (CVE-2019-11837)

A denial of service DoS vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

NGINX NJS Buffer Overflow (CVE-2019-13067)

A buffer overflow vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

njs:njs_process_script_fuzzer: Heap-buffer-overflow in njs_lexer_multi

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5716123570143232 Project: njs Fuzzing Engine: afl Fuzz Target: njsprocessscriptfuzzer Job Type: aflasannjs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x612000000442 Crash State:...

njs:njs_process_script_fuzzer: Heap-buffer-overflow in njs_json_append_string

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5142681640763392 Project: njs Fuzzing Engine: afl Fuzz Target: njsprocessscriptfuzzer Job Type: aflasannjs Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x625000a18900 Crash State:...

njs:njs_process_script_fuzzer: Use-of-uninitialized-value in njs_dprint

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5682261708242944 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: njsdprin...

njs:njs_process_script_fuzzer: Heap-buffer-overflow in njs_json_append_string

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5665427586023424 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x625000070100 Cras...

njs:njs_process_script_fuzzer: Heap-buffer-overflow in njs_string_new

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5166284002295808 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61d000003080 Crash...

njs:njs_process_script_fuzzer: Use-of-uninitialized-value in njs_dprint

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5679771266842624 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: njsdprin...

njs:njs_process_script_fuzzer: Memcpy-param-overlap in njs_chb_join_to

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5742835815153664 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x62500008b700,0x62500008b8...

njs:njs_process_script_fuzzer: Heap-buffer-overflow in njs_json_append_string

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5734288570187776 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x62500009d100 Cras...

njs:njs_process_script_fuzzer: Memcpy-param-overlap in njs_chb_join_to

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5683698955714560 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x625000075b00,0x625000075c...

Security Bulletin: Multiple Vulnerabilities in Nginx affects IBM Watson Studio Local

Summary Multiple Vulnerabilities in Nginx affects IBM Watson Studio Local Vulnerability Details CVEID: CVE-2019-13067 DESCRIPTION: njs through 0.3.3, used in NGINX, has a buffer over-read in nxtutf8decode in nxt/nxtutf8.c. This issue occurs after the fix for CVE-2019-12207 is in place. CVSS Base...