CVE-2022-29779

概要

参考情報

• nginx/njs commit 2e00e95 · Patch
• nginx/njs · Exploit

njs のその他の脆弱性

• CVE-2022-35173高 7.5An issue was discovered in Nginx NJS v0.7.5. The JUMP offset for a break instruction was not set to a correct offset during code generation,…
• CVE-2022-30503中 5.5Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_set_number at src/njs_value.h.
• CVE-2022-29780中 5.5Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_array_prototype_sort at src/njs_array.c.
• CVE-2021-46461緊急 9.8njs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via njs_vmcode_typeof in /src/njs_vmcode.c.