exploitDog

CVE-2019-11838

Опубликовано: 09 мая 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.splice after a resize, related to njs_array_prototype_splice in njs/njs_array.c, because of njs_array_expand size mishandling.

Ссылки

https://github.com/nginx/njs/issues/153
Exploit
Issue Tracking
Third Party Advisory
https://github.com/nginx/njs/issues/153
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:f5:njs:*:*:*:*:*:*:*:*

Версия до 0.3.1 (включая)

EPSS

Процентиль: 60%

0.00389

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787

Связанные уязвимости

GHSA-5cqj-x29q-49hf

CVSS3: 9.8

github

больше 3 лет назад

njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.splice after a resize, related to njs_array_prototype_splice in njs/njs_array.c, because of njs_array_expand size mishandling.

EPSS

Процентиль: 60%

0.00389

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787