CVE-2022-43284

Опубликовано: 28 окт. 2022

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Nginx NJS v0.7.2 to v0.7.4 was discovered to contain a segmentation violation via njs_scope_valid_value at njs_scope.h. NOTE: the vendor disputes the significance of this report because NJS does not operate on untrusted input.

Ссылки

https://github.com/nginx/njs/issues/470
Exploit
Issue Tracking
Patch
Third Party Advisory
https://github.com/nginx/njs/issues/529
Exploit
Issue Tracking
Patch
Third Party Advisory
https://github.com/nginx/njs/issues/470
Exploit
Issue Tracking
Patch
Third Party Advisory
https://github.com/nginx/njs/issues/529
Exploit
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:f5:njs:*:*:*:*:*:*:*:*

Версия от 0.7.2 (включая) до 0.7.4 (включая)

EPSS

Процентиль: 47%

0.0024

Низкий

7.5 High

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-v85j-72gv-6fc7

CVSS3: 7.5

github

больше 3 лет назад

Nginx NJS v0.7.2 to v0.7.4 was discovered to contain a segmentation violation via njs_scope_valid_value at njs_scope.h.

BDU:2022-06626

CVSS3: 7.5

fstec

больше 3 лет назад

Уязвимость функции njs_scope_valid_value (njs_scope.h) интерпретатора njs сервера nginx, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 47%

0.0024

Низкий

7.5 High

CVSS3

Дефекты

NVD-CWE-noinfo