CVE-2022-31306

Name of the Vulnerable Software and Affected Versions Nginx NJS version 0.7.2

Description The issue is related to the function njs array convert to slow array at src/njs array.c in the Nginx NJS interpreter, which can lead to uncontrolled resource consumption. This can potentially allow a remote attacker to elevate their privileges. The problem is caused by a segmentation violation in the mentioned function.

Recommendations For Nginx NJS version 0.7.2, consider disabling the njs array convert to slow array function as a temporary workaround until a patch is available. Restrict access to the njs array.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.