Nginx NJS v0.7.2 was discovered to contain a heap-use-after-free bug caused by illegal memory copy in the function njs_json_parse_iterator_call at njs_json.c.
References
| Link | Resource |
|---|---|
| https://github.com/nginx/njs/commit/2ad0ea24a58d570634e09c2e58c3b314505eaa6a | Patch Third Party Advisory |
| https://github.com/nginx/njs/issues/480 | Exploit Issue Tracking Patch Third Party Advisory |
| https://github.com/nginx/njs/commit/2ad0ea24a58d570634e09c2e58c3b314505eaa6a | Patch Third Party Advisory |
| https://github.com/nginx/njs/issues/480 | Exploit Issue Tracking Patch Third Party Advisory |
Configurations
History
21 Nov 2024, 07:26
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/nginx/njs/commit/2ad0ea24a58d570634e09c2e58c3b314505eaa6a - Patch, Third Party Advisory | |
| References | () https://github.com/nginx/njs/issues/480 - Exploit, Issue Tracking, Patch, Third Party Advisory |
Information
Published : 2022-10-28 21:15
Updated : 2024-11-21 07:26
NVD link : CVE-2022-43286
Mitre link : CVE-2022-43286
CVE.ORG link : CVE-2022-43286
JSON object : View
Products Affected
f5
- njs
CWE
CWE-416
Use After Free