EUVD-2019-3853

Malware in sbrugna...

CVE-2019-12208

njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in njsfunctionnativecall in njs/njsfunction.c...

CVE-2019-12208

NGINX njs (njs up to 0.3.1) contains a heap-based buffer overflow in njs_function_native_call (njs/njs_function.c). A remote attacker could overflow a buffer by sending overly long data and potentially execute arbitrary code. This CVE is observed across multiple vendor advisories acknowledging th...

CVE-2019-12208: Out-of-bounds Write

njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in njsfunctionnativecall in njs/njsfunction.c...