PT-2019-13105

Name of the Vulnerable Software and Affected Versions njs versions prior to 0.3.4 Description The issue is a buffer over-read in the nxt utf8 decode function located in nxt/nxt utf8.c. This problem arises after the fix for a previous issue is applied. Recommendations For versions prior to 0.3.4,...

PT-2019-12698

Name of the Vulnerable Software and Affected Versions njs versions prior to 0.3.2 Description The issue is related to a heap-based buffer over-read in the nxt utf8 decode function, located in nxt/nxt utf8.c. This function is part of njs, which is used in NGINX. Recommendations For versions prior ...

PT-2019-12697

Name of the Vulnerable Software and Affected Versions njs versions prior to 0.3.2 Description The issue is a heap-based buffer overflow in the nxt utf8 encode function in nxt utf8.c. This function is part of njs, which is used in NGINX. Recommendations For versions prior to 0.3.2, update to versi...

PT-2019-12520

Name of the Vulnerable Software and Affected Versions njs versions prior to 0.3.2 Description The issue is related to a segmentation fault in String.prototype.toBytes for negative arguments. It is connected to the functions nxt utf8 next in nxt/nxt utf8.h and njs string offset in njs/njs string.c...