NGINX NJS Heap-Based Buffer Overflow (CVE-2019-12206)

A buffer overflow vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

NGINX NJS Denial of Service (CVE-2019-11837)

A denial of service DoS vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

NGINX NJS Heap-Based Buffer Overflow (CVE-2019-11838)

A buffer overflow vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

NGINX NJS Heap-Based Buffer Overflow (CVE-2019-11839)

A buffer overflow vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

NGINX NJS Buffer Overflow (CVE-2019-13067)

A buffer overflow vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

njs:njs_process_script_fuzzer: Heap-buffer-overflow in njs_lexer_multi

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5716123570143232 Project: njs Fuzzing Engine: afl Fuzz Target: njsprocessscriptfuzzer Job Type: aflasannjs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x612000000442 Crash State:...

njs:njs_process_script_fuzzer: Heap-buffer-overflow in njs_json_append_string

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5142681640763392 Project: njs Fuzzing Engine: afl Fuzz Target: njsprocessscriptfuzzer Job Type: aflasannjs Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x625000a18900 Crash State:...

njs:njs_process_script_fuzzer: Use-of-uninitialized-value in njs_dprint

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5682261708242944 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: njsdprin...

njs:njs_process_script_fuzzer: Heap-buffer-overflow in njs_json_append_string

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5665427586023424 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x625000070100 Cras...

njs:njs_process_script_fuzzer: Heap-buffer-overflow in njs_string_new

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5166284002295808 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61d000003080 Crash...

njs:njs_process_script_fuzzer: Use-of-uninitialized-value in njs_dprint

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5679771266842624 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: njsdprin...

njs:njs_process_script_fuzzer: Memcpy-param-overlap in njs_chb_join_to

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5742835815153664 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x62500008b700,0x62500008b8...

njs:njs_process_script_fuzzer: Heap-buffer-overflow in njs_json_append_string

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5734288570187776 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x62500009d100 Cras...

njs:njs_process_script_fuzzer: Memcpy-param-overlap in njs_chb_join_to

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5683698955714560 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x625000075b00,0x625000075c...

Security Bulletin: Multiple Vulnerabilities in Nginx affects IBM Watson Studio Local

Summary Multiple Vulnerabilities in Nginx affects IBM Watson Studio Local Vulnerability Details CVEID: CVE-2019-13067 DESCRIPTION: njs through 0.3.3, used in NGINX, has a buffer over-read in nxtutf8decode in nxt/nxtutf8.c. This issue occurs after the fix for CVE-2019-12207 is in place. CVSS Base...

njs:njs_process_script_fuzzer: Segv on unknown address in njs_vm_value_dump

Detailed Report: https://oss-fuzz.com/testcase?key=5721730840788992 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: njsvmvaluedump njsextconsolelog...

njs:njs_process_script_fuzzer: Segv on unknown address in njs_chb_join

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5669544941322240 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: njschbjoin...

njs:njs_process_script_fuzzer: Use-of-uninitialized-value in njs_string_prototype_split

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5712452738351104 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

njs:njs_process_script_fuzzer: Heap-buffer-overflow in njs_json_append_string

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5632802355937280 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x625000090900 Cras...

njs:njs_process_script_fuzzer: Use-of-uninitialized-value in pcre_compile2

Detailed Report: https://oss-fuzz.com/testcase?key=5083619064545280 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pcrecompile2 njsregexcompile...