598 matches found
CVE-2019-13067
njs through 0.3.3, used in NGINX, has a buffer over-read in nxtutf8decode in nxt/nxtutf8.c. This issue occurs after the fix for CVE-2019-12207 is in place...
Design/Logic Flaw
njs through 0.3.3, used in NGINX, has a buffer over-read in nxtutf8decode in nxt/nxtutf8.c. This issue occurs after the fix for CVE-2019-12207 is in place...
CVE-2019-13067
njs through 0.3.3, used in NGINX, has a buffer over-read in nxtutf8decode in nxt/nxtutf8.c. This issue occurs after the fix for CVE-2019-12207 is in place...
CVE-2019-13067
CVE-2019-13067 affects njs up to 0.3.3, used in NGINX. It is a buffer over-read in nxt_utf8_decode (nxt/nxt_utf8.c) occurring after the CVE-2019-12207 fix. CVSS: 2.0/3.0 vectors indicate HIGH/CRITICAL impact. Connected documents confirm the same root cause and describe remediation steps for IBM C...
CVE-2019-13067
njs through 0.3.3, used in NGINX, has a buffer over-read in nxtutf8decode in nxt/nxtutf8.c. This issue occurs after the fix for CVE-2019-12207 is in place...
CVE-2019-13067: Out-of-bounds Read
njs through 0.3.3, used in NGINX, has a buffer over-read in nxtutf8decode in nxt/nxtutf8.c. This issue occurs after the fix for CVE-2019-12207 is in place...
PT-2019-13105
Name of the Vulnerable Software and Affected Versions njs versions prior to 0.3.4 Description The issue is a buffer over-read in the nxt utf8 decode function located in nxt/nxt utf8.c. This problem arises after the fix for a previous issue is applied. Recommendations For versions prior to 0.3.4,...
njs/njs_process_script_fuzzer: Use-of-uninitialized-value in add_name
Project: http://hg.nginx.org/njs Detailed report: https://oss-fuzz.com/testcase?key=5644192103006208 Project: njs Fuzzer: libFuzzernjsprocessscriptfuzzer Fuzz target binary: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...
njs/njs_process_script_fuzzer: Stack-use-after-return in compile_regex
Project: http://hg.nginx.org/njs Detailed report: https://oss-fuzz.com/testcase?key=5682963594870784 Project: njs Fuzzer: libFuzzernjsprocessscriptfuzzer Fuzz target binary: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Stack-use-after-return READ 2 Crash Addres...
njs/njs_process_script_fuzzer: Use-of-uninitialized-value in njs_values_hash_test
Project: http://hg.nginx.org/njs Detailed report: https://oss-fuzz.com/testcase?key=5683352457183232 Project: njs Fuzzer: libFuzzernjsprocessscriptfuzzer Fuzz target binary: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...
njs/njs_process_script_fuzzer: Use-of-uninitialized-value in nxt_random_add
Project: http://hg.nginx.org/njs Detailed report: https://oss-fuzz.com/testcase?key=5655066641432576 Project: njs Fuzzer: libFuzzernjsprocessscriptfuzzer Fuzz target binary: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...
njs/njs_process_script_fuzzer: Heap-buffer-overflow in nxt_vsprintf
Project: http://hg.nginx.org/njs Detailed report: https://oss-fuzz.com/testcase?key=5142265766346752 Project: njs Fuzzer: libFuzzernjsprocessscriptfuzzer Fuzz target binary: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Heap-buffer-overflow READ 5 Crash Address:...
PT-2019-5778
Name of the Vulnerable Software and Affected Versions njs versions through 0.3.3 Description The issue is related to a heap-based buffer over-read in the nxt vsprintf function in nxt/nxt sprintf.c during error handling. This can occur when an njs regexp literal call leads to an njs parser lexer...
Heap overflow
njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in nxtutf8encode in nxtutf8.c...
Heap overflow
njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in njsfunctionnativecall in njs/njsfunction.c...
CVE-2019-12207
njs through 0.3.1, used in NGINX, has a heap-based buffer over-read in nxtutf8decode in nxt/nxtutf8.c...
Heap overflow
njs through 0.3.1, used in NGINX, has a heap-based buffer over-read in nxtutf8decode in nxt/nxtutf8.c...
CVE-2019-12208
njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in njsfunctionnativecall in njs/njsfunction.c...