Lucene search

K

8 matches found

CVE
CVE
added 2019/07/16 5:15 p.m.135 views

CVE-2019-13617

njs through 0.3.3, used in NGINX, has a heap-based buffer over-read in nxt_vsprintf in nxt/nxt_sprintf.c during error handling, as demonstrated by an njs_regexp_literal call that leads to an njs_parser_lexer_error call and then an njs_parser_scope_error call.

6.5CVSS6.7AI score0.00288EPSS
CVE
CVE
added 2019/06/30 12:15 a.m.72 views

CVE-2019-13067

njs through 0.3.3, used in NGINX, has a buffer over-read in nxt_utf8_decode in nxt/nxt_utf8.c. This issue occurs after the fix for CVE-2019-12207 is in place.

9.8CVSS9.4AI score0.00439EPSS
CVE
CVE
added 2019/05/20 2:29 p.m.58 views

CVE-2019-12206

njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in nxt_utf8_encode in nxt_utf8.c.

9.8CVSS9.6AI score0.004EPSS
CVE
CVE
added 2019/05/20 2:29 p.m.55 views

CVE-2019-12208

njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in njs_function_native_call in njs/njs_function.c.

9.8CVSS9.6AI score0.00465EPSS
CVE
CVE
added 2019/05/20 2:29 p.m.52 views

CVE-2019-12207

njs through 0.3.1, used in NGINX, has a heap-based buffer over-read in nxt_utf8_decode in nxt/nxt_utf8.c.

9.8CVSS9.3AI score0.00439EPSS
CVE
CVE
added 2019/05/09 2:29 p.m.47 views

CVE-2019-11839

njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.push after a resize, related to njs_array_prototype_push in njs/njs_array.c, because of njs_array_expand size mishandling.

9.8CVSS9.6AI score0.00389EPSS
CVE
CVE
added 2019/05/09 2:29 p.m.42 views

CVE-2019-11838

njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.splice after a resize, related to njs_array_prototype_splice in njs/njs_array.c, because of njs_array_expand size mishandling.

9.8CVSS9.6AI score0.00389EPSS
CVE
CVE
added 2019/05/09 2:29 p.m.39 views

CVE-2019-11837

njs through 0.3.1, used in NGINX, has a segmentation fault in String.prototype.toBytes for negative arguments, related to nxt_utf8_next in nxt/nxt_utf8.h and njs_string_offset in njs/njs_string.c.

7.5CVSS7.4AI score0.00283EPSS