PT-2022-5322
CVE-2022-43286
·
تاريخ النشر
2022-10-28
·
تاريخ التحديث
2022-10-31
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Nginx NJS version 0.7.2
Description
The issue is related to a heap-use-after-free bug caused by an illegal memory copy in the
njs json parse iterator call function at njs json.c. This bug can be exploited by a remote attacker to execute arbitrary code.Recommendations
For Nginx NJS version 0.7.2, as a temporary workaround, consider disabling the
njs json parse iterator call function until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾