EUVD-2019-3851

Malware in sbrugna...

Heap overflow

njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in nxtutf8encode in nxtutf8.c...

CVE-2019-12206

CVE-2019-12206 affects NGINX with NJS up to 0.3.1, where a heap-based buffer overflow in nxt_utf8_encode (nxt/nxt_utf8.c) can be triggered by overly long data. Documented impact includes potential remote code execution or crashes; the issue is addressed in later NJS/NGINX advisories. Remediation ...