Denial Of Service (DoS)

2022-05-0802:04:30

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

71.5%

JSON

njs is vulnerable to denial of service. An attacker can crash the application through the out-of-bounds array access via njs_vmcode_typeof in /src/njs_vmcode.c

CPENameOperatorVersion
njs:edgeeq0.6.1-r0
njs:edgeeq0.6.2-r0
njs:edgeeq0.7.0-r0
njs:edgeeq0.5.2-r0
njs:edgeeq0.6.0-r0
njs:3.15eq0.7.0-r0
nginx:edgeeq1.20.1-r5
nginx:edgeeq1.20.1-r9
nginx:edgeeq1.20.1-r7
nginx:edgeeq1.20.1-r0

Name	Operator	Version
njs:edge	eq	0.6.1-r0
njs:edge	eq	0.6.2-r0
njs:edge	eq	0.7.0-r0
njs:edge	eq	0.5.2-r0
njs:edge	eq	0.6.0-r0
njs:3.15	eq	0.7.0-r0
nginx:edge	eq	1.20.1-r5
nginx:edge	eq	1.20.1-r9
nginx:edge	eq	1.20.1-r7
nginx:edge	eq	1.20.1-r0