CVE-2022-43284

Summary

Nginx NJS v0.7.2 to v0.7.4 was discovered to contain a segmentation violation via njs_scope_valid_value at njs_scope.h. NOTE: the vendor disputes the significance of this report because NJS does not operate on untrusted input.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/nginx/njs/issues/470
• https://github.com/nginx/njs/issues/529

References

• https://github.com/nginx/njs/issues/470
• https://github.com/nginx/njs/issues/529

• ←Previous
• Next→