CVE-2022-35173

Description

References

• hg.nginx.org/njs/rev/b7c4e0f714a9 · Patch
• nginx/njs commit 4045538 · Patch
• nginx/njs · Exploit

Mais vulnerabilidades de njs

• CVE-2022-30503MÉDIO 5.5Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_set_number at src/njs_value.h.
• CVE-2022-29780MÉDIO 5.5Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_array_prototype_sort at src/njs_array.c.
• CVE-2022-29779MÉDIO 5.5Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_value_own_enumerate at src/njs_value.c.
• CVE-2021-46461CRÍTICO 9.8njs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via njs_vmcode_typeof in /src/njs_vmcode.c.