The vulnerability of the njs_function_frame function (src/njs_function.h) in the njs interpreter of the nginx server allows a hacker to cause a service failure.

The vulnerability of the njsfunctionframe function src/njsfunction.h in the njs interpreter of the nginx server is related to reading beyond the memory boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2023-27730

Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njslvlhshfind at src/njslvlhsh.c...

CVE-2023-27729

Nginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njsvmcodereturn at src/njsvmcode.c...

CVE-2023-27727

Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njsfunctionframe at src/njsfunction.h...

CVE-2023-27728

Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njsdumpisrecursive at src/njsvmcode.c...

Code injection

Nginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njsvmcodereturn at src/njsvmcode.c...

Design/Logic Flaw

Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njslvlhshfind at src/njslvlhsh.c...

Design/Logic Flaw

Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njsfunctionframe at src/njsfunction.h...

Design/Logic Flaw

Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njsdumpisrecursive at src/njsvmcode.c...

PT-2023-7315 · Nginx · Nginx Njs

Name of the Vulnerable Software and Affected Versions: Nginx NJS version 0.7.10 Description: The issue is related to a segmentation violation via the function njs function frame at src/njs function.h. This can lead to a denial of service. The vulnerability is associated with a memory access issue...

CVE-2023-27730

Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njslvlhshfind at src/njslvlhsh.c...

CVE-2023-27729

Summary: CVE-2023-27729 affects Nginx NJS 0.7.10. The issue is an illegal memcpy in the function njs_vmcode_return in src/njs_vmcode.c, which can lead to a memory overflow. The CVSS 3.1 base score is 7.5 (HIGH) with NETWORK attack vector, no privileges, no user interaction, and availability impac...

CVE-2023-27730

CVE-2023-27730 affects Nginx NJS 0.7.10 , with a segmentation violation in the function njs_lvlhsh_find located in src/njs_lvlhsh.c . The incident is reflected with a CVSS v3.1 base score of 7.5 (HIGH) and affects availability (A) while confidentiality and integrity are unchanged. The attack vect...

CVE-2023-27729

Nginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njsvmcodereturn at src/njsvmcode.c...

CVE-2023-27730

Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njslvlhshfind at src/njslvlhsh.c...

CVE-2023-27728

Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njsdumpisrecursive at src/njsvmcode.c...

CVE-2023-27730

Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njslvlhshfind at src/njslvlhsh.c...

CVE-2023-27729

Nginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njsvmcodereturn at src/njsvmcode.c...

CVE-2023-27727

Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njsfunctionframe at src/njsfunction.h...

CVE-2023-27729

Nginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njsvmcodereturn at src/njsvmcode.c...