Njs Security Vulnerabilities and Issues — Njs CVE List

Lucene search

F5Njs

4 matches found

CVE•added 2020/08/13 7:15 p.m.•72 views

CVE-2020-24346

njs through 0.4.3, used in NGINX, has a use-after-free in njs_json_parse_iterator_call in njs_json.c.

7.8CVSS7.6AI score0.00152EPSS

CVE•added 2020/08/13 7:15 p.m.•72 views

CVE-2020-24349

njs through 0.4.3, used in NGINX, allows control-flow hijack in njs_value_property in njs_value.c. NOTE: the vendor considers the issue to be "fluff" in the NGINX use case because there is no remote attack surface.

5.5CVSS5.5AI score0.00127EPSS

CVE•added 2020/08/13 7:15 p.m.•65 views

CVE-2020-24347

njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_lvlhsh_level_find in njs_lvlhsh.c.

5.5CVSS5.4AI score0.00041EPSS

CVE•added 2020/08/13 7:15 p.m.•58 views

CVE-2020-24348

njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_json_stringify_iterator in njs_json.c.

5.5CVSS5.4AI score0.00041EPSS