CVE-2022-27008: Buffer Copy without Checking Size of Input

nginx njs 0.7.2 is vulnerable to Buffer Overflow. Type confused in Array.prototype.concat when a slow array appended element is fast array...

PT-2022-3849 · Nginx · Nginx Njs

Name of the Vulnerable Software and Affected Versions: Nginx NJS version 0.7.3 Description: The issue is caused by a stack overflow in the njs default module loader function at /src/njs/src/njs module.c of the Nginx NJS interpreter. This could allow a remote attacker to impact the confidentiality...

PT-2022-3358

Name of the Vulnerable Software and Affected Versions Nginx NJS version 0.7.2 Description The issue is related to a buffer overflow in the njs array prototype sort function of the njs interpreter in the nginx server. This can be exploited by a remote attacker to cause a denial of service...

PT-2022-3359

Name of the Vulnerable Software and Affected Versions Nginx NJS version 0.7.2 Description The issue is related to a segmentation violation in the njs set number function, which can be caused by insufficient input data sanitization, leading to a buffer overflow. This can potentially allow a remote...

PT-2022-2654

Name of the Vulnerable Software and Affected Versions NGINX NJS version 0.7.2 Description The issue is related to a NULL pointer dereference via the njs vmcode array component at /src/njs vmcode.c. This can potentially allow a remote attacker to cause a denial of service. Recommendations For NGIN...

PT-2022-2375 · Nginx · Nginx Njs

Name of the Vulnerable Software and Affected Versions: nginx njs version 0.7.2 Description: The issue is related to a Buffer Overflow in the Array.prototype.concat function of the njs interpreter in the nginx server. This occurs when a slow array appended element is a fast array, leading to a typ...

Nginx njs Resource management error vulnerability

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from the US-based Nginx Corporation. A resource management error vulnerability exists in Nginx njs 0.7.0 and earlier versions, which stems from njs including a heap use-after-free in njsawaitfulfilled...

NGINX NJS Denial of Service (CVE-2019-11837)

A denial of service DoS vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

NGINX NJS Heap-Based Buffer Overflow (CVE-2019-11839)

A buffer overflow vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...