exploitDog

CVE-2020-24347

Опубликовано: 13 авг. 2020

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_lvlhsh_level_find in njs_lvlhsh.c.

Ссылки

https://github.com/nginx/njs/issues/323
Exploit
Issue Tracking
Patch
Third Party Advisory
https://security.netapp.com/advisory/ntap-20200918-0001/
Third Party Advisory
https://github.com/nginx/njs/issues/323
Exploit
Issue Tracking
Patch
Third Party Advisory
https://security.netapp.com/advisory/ntap-20200918-0001/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:f5:njs:*:*:*:*:*:*:*:*

Версия до 0.4.3 (включая)

EPSS

Процентиль: 14%

0.00046

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVE-2020-24347

CVSS3: 5.5

msrc

5 месяцев назад

njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_lvlhsh_level_find in njs_lvlhsh.c.

GHSA-88pj-43x4-vj4q

CVSS3: 5.5

github

больше 3 лет назад

njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_lvlhsh_level_find in njs_lvlhsh.c.

EPSS

Процентиль: 14%

0.00046

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-125