Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Xeioexo

#13535of 53,634
19.6Total CVSS
Vulnerabilities · 2
Critical
2
PT-2019-12521
9.8
2019-05-09
Nginx · Njs · CVE-2019-11838
**Name of the Vulnerable Software and Affected Versions** njs versions prior to 0.3.2 **Description** The issue is related to a heap-based buffer overflow in Array.prototype.splice after a resize. This occurs due to mishandling of the njs array expand size in the njs array prototype splice function, located in njs/njs array.c. **Recommendations** For versions prior to 0.3.2, update to version 0.3.2 or later to resolve the issue.
PT-2019-12522
9.8
2019-05-09
Nginx · Njs · CVE-2019-11839
**Name of the Vulnerable Software and Affected Versions** njs versions through 0.3.1 **Description** The issue is related to a heap-based buffer overflow in Array.prototype.push after a resize. This is due to mishandling of the njs array expand size in the njs array prototype push function located in njs/njs array.c. **Recommendations** For versions through 0.3.1, update to a version that contains a fix for this issue.