PT-2022-5322 · Nginx · Nginx Njs

Name of the Vulnerable Software and Affected Versions: Nginx NJS version 0.7.2 Description: The issue is related to a heap-use-after-free bug caused by an illegal memory copy in the njs json parse iterator call function at njs json.c. This bug can be exploited by a remote attacker to execute...

Nginx resource management error vulnerabilities

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from Nginx, Inc. njs is one of the scripting language components that supports extended NGINX functionality. A security vulnerability exists in Nginx NJS version 0.7.2, which stems from heap-based...

PT-2020-15697

Name of the Vulnerable Software and Affected Versions njs versions through 0.4.3 Description The issue is related to a use-after-free in the njs json parse iterator call function in njs json.c. This affects njs, which is used in NGINX. Recommendations For versions through 0.4.3, update to a versi...