CVE-2022-29379

Katalog CVE

CVSS 9.8 · Critical EPSS 1,8%

Kerentanan Out-of-bounds Write pada f5 njs. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Nginx NJS v0.7.3 was discovered to contain a stack overflow in the function njs_default_module_loader at /src/njs/src/njs_module.c. NOTE: multiple third parties dispute this report, e.g., the behavior is only found in unreleased development code that was not part of the 0.7.2, 0.7.3, or 0.7.4 release

Rincian

Terbit di NVD

25 Mei 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

1,8% peluang dieksploitasi; lebih tinggi dari 77,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/nginx/njs/commit/ab1702c7af9959366a5ddc4a75b4357d4e9ebdc1 patch · advisory pihak ketiga
• https://github.com/nginx/njs/issues/493 exploit · issue tracking · patch · advisory pihak ketiga
• https://github.com/nginx/njs/issues/491 issue tracking · advisory pihak ketiga