CVE-2022-35173

概要

参考情報

• hg.nginx.org/njs/rev/b7c4e0f714a9 · Patch
• nginx/njs commit 4045538 · Patch
• nginx/njs · Exploit

njs のその他の脆弱性

• CVE-2022-30503中 5.5Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_set_number at src/njs_value.h.
• CVE-2022-29780中 5.5Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_array_prototype_sort at src/njs_array.c.
• CVE-2022-29779中 5.5Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_value_own_enumerate at src/njs_value.c.
• CVE-2021-46461緊急 9.8njs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via njs_vmcode_typeof in /src/njs_vmcode.c.