CVE-2020-24347
published 2020-08-13CVE-2020-24347: njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_lvlhsh_level_find in njs_lvlhsh.c.
medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_lvlhsh_level_find in njs_lvlhsh.c.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| f5 | njs | <= 0.4.3 | — |
| msrc | azl3_nginx_1.25.4-1_on_azure_linux_3.0 | — | — |
| msrc | azl3_nginx_1.25.4-4_on_azure_linux_3.0 | — | — |