Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Xeioexo

#13653de 53,638
19.6CVSS total
Vulnerabilidades · 2
Crítica
2
PT-2019-12521
9.8
2019-05-09
Nginx · Njs · CVE-2019-11838
**Name of the Vulnerable Software and Affected Versions** njs versions prior to 0.3.2 **Description** The issue is related to a heap-based buffer overflow in Array.prototype.splice after a resize. This occurs due to mishandling of the njs array expand size in the njs array prototype splice function, located in njs/njs array.c. **Recommendations** For versions prior to 0.3.2, update to version 0.3.2 or later to resolve the issue.
PT-2019-12522
9.8
2019-05-09
Nginx · Njs · CVE-2019-11839
**Name of the Vulnerable Software and Affected Versions** njs versions through 0.3.1 **Description** The issue is related to a heap-based buffer overflow in Array.prototype.push after a resize. This is due to mishandling of the njs array expand size in the njs array prototype push function located in njs/njs array.c. **Recommendations** For versions through 0.3.1, update to a version that contains a fix for this issue.