CVE-2019-11837

published 2019-05-09

CVE-2019-11837: njs through 0.3.1, used in NGINX, has a segmentation fault in String.prototype.toBytes for negative arguments, related to nxt_utf8_next in nxt/nxt_utf8.h and…

high 7.5 CVSS 3.0

AV N AC L PR N UI N S U C N I N A H

njs through 0.3.1, used in NGINX, has a segmentation fault in String.prototype.toBytes for negative arguments, related to nxt_utf8_next in nxt/nxt_utf8.h and njs_string_offset in njs/njs_string.c.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
f5	njs	<= 0.3.1	—

CWE-189