CVE-2019-13617

Name of the Vulnerable Software and Affected Versions njs versions through 0.3.3

Description The issue is related to a heap-based buffer over-read in the nxt vsprintf function in nxt/nxt sprintf.c during error handling. This can occur when an njs regexp literal call leads to an njs parser lexer error call and then an njs parser scope error call. The vulnerability may allow a remote attacker to cause a denial of service.

Recommendations For njs versions through 0.3.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.