Use After Free

2022-05-0807:43:11

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

70.2%

JSON

njs is vulnerable to use after free. The vulnerability exists due to a memory corruption in njs_await_fulfilled.

CPENameOperatorVersion
nginx:edgeeq1.20.1-r4
nginx:edgeeq1.20.1-r6
nginx:edgeeq1.20.2-r1
nginx:edgeeq1.20.2-r0
nginx:edgeeq1.18.0-r15
nginx:edgeeq1.20.1-r12
nginx:edgeeq1.18.0-r14
nginx:edgeeq1.20.1-r0
nginx:edgeeq1.20.1-r5
nginx:edgeeq1.20.1-r7

Name	Operator	Version
nginx:edge	eq	1.20.1-r4
nginx:edge	eq	1.20.1-r6
nginx:edge	eq	1.20.2-r1
nginx:edge	eq	1.20.2-r0
nginx:edge	eq	1.18.0-r15
nginx:edge	eq	1.20.1-r12
nginx:edge	eq	1.18.0-r14
nginx:edge	eq	1.20.1-r0
nginx:edge	eq	1.20.1-r5
nginx:edge	eq	1.20.1-r7