CVE-2022-29369

EPSS 0.39%
Published 12.05.2022 19:15:49
Last modified 21.11.2024 06:58:58
Source cve@mitre.org
Teams watchlist Login
Open Login

Nginx NJS v0.7.2 was discovered to contain a segmentation violation via njs_lvlhsh_bucket_find at njs_lvlhsh.c.

Affected products Warnungen 0 Metrics 3 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

F5 ≫ Njs Version0.7.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.39%	0.591

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-754 Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

https://github.com/nginx/njs/commit/222d6fdcf0c6485ec8e175f3a7b70d650c234b4e

Patch

Third Party Advisory

https://github.com/nginx/njs/issues/467

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-29369

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-29369

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-29369

EUVD