unit:fuzz_json: Use-of-uninitialized-value in nxt_vsprintf

Detailed Report: https://oss-fuzz.com/testcase?key=5545917827055616 Project: unit Fuzzing Engine: libFuzzer Fuzz Target: fuzzjson Job Type: libfuzzermsanunit Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: nxtvsprintf nxtconfvldterror nxtconfvldtif Sanitizer:...

SUSE CVE-2019-13617

njs through 0.3.3, used in NGINX, has a heap-based buffer over-read in nxtvsprintf in nxt/nxtsprintf.c during error handling, as demonstrated by an njsregexpliteral call that leads to an njsparserlexererror call and then an njsparserscopeerror call...

CVE-2019-13617

njs through 0.3.3, used in NGINX, has a heap-based buffer over-read in nxtvsprintf in nxt/nxtsprintf.c during error handling, as demonstrated by an njsregexpliteral call that leads to an njsparserlexererror call and then an njsparserscopeerror call...

CVE-2019-13617: Out-of-bounds Read

njs through 0.3.3, used in NGINX, has a heap-based buffer over-read in nxtvsprintf in nxt/nxtsprintf.c during error handling, as demonstrated by an njsregexpliteral call that leads to an njsparserlexererror call and then an njsparserscopeerror call...