exploitDog

CVE-2019-11839

Опубликовано: 09 мая 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.push after a resize, related to njs_array_prototype_push in njs/njs_array.c, because of njs_array_expand size mishandling.

Ссылки

https://github.com/nginx/njs/issues/152
Exploit
Issue Tracking
Third Party Advisory
https://github.com/nginx/njs/issues/152
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:f5:njs:*:*:*:*:*:*:*:*

Версия до 0.3.1 (включая)

EPSS

Процентиль: 59%

0.00389

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787

Связанные уязвимости

GHSA-585q-jwfj-chw8

CVSS3: 9.8

github

больше 3 лет назад

njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.push after a resize, related to njs_array_prototype_push in njs/njs_array.c, because of njs_array_expand size mishandling.

EPSS

Процентиль: 59%

0.00389

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787