CVE-2019-11838

njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.splice after a resize, related to njsarrayprototypesplice in njs/njsarray.c, because of njsarrayexpand size mishandling...

CVE-2019-11837

CVE-2019-11837 affects njs up to version 0.3.1 used in NGINX. The vulnerability is a segmentation fault in String.prototype.toBytes for negative arguments, tied to nxt_utf8_next (nxt/nxt_utf8.h) and njs_string_offset (njs/njs_string.c). The connected documents provide concrete technical details a...

CVE-2019-11837

njs through 0.3.1, used in NGINX, has a segmentation fault in String.prototype.toBytes for negative arguments, related to nxtutf8next in nxt/nxtutf8.h and njsstringoffset in njs/njsstring.c...

CVE-2019-11839: Out-of-bounds Write

njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.push after a resize, related to njsarrayprototypepush in njs/njsarray.c, because of njsarrayexpand size mishandling...

PT-2019-12520

Name of the Vulnerable Software and Affected Versions njs versions prior to 0.3.2 Description The issue is related to a segmentation fault in String.prototype.toBytes for negative arguments. It is connected to the functions nxt utf8 next in nxt/nxt utf8.h and njs string offset in njs/njs string.c...

CVE-2019-11838: Out-of-bounds Write

njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.splice after a resize, related to njsarrayprototypesplice in njs/njsarray.c, because of njsarrayexpand size mishandling...

PT-2019-12521

Name of the Vulnerable Software and Affected Versions njs versions prior to 0.3.2 Description The issue is related to a heap-based buffer overflow in Array.prototype.splice after a resize. This occurs due to mishandling of the njs array expand size in the njs array prototype splice function,...

CVE-2019-11837: Undefined Security Weakness

njs through 0.3.1, used in NGINX, has a segmentation fault in String.prototype.toBytes for negative arguments, related to nxtutf8next in nxt/nxtutf8.h and njsstringoffset in njs/njsstring.c...

PT-2019-12522

Name of the Vulnerable Software and Affected Versions njs versions through 0.3.1 Description The issue is related to a heap-based buffer overflow in Array.prototype.push after a resize. This is due to mishandling of the njs array expand size in the njs array prototype push function located in...