Description
njs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via njs_vmcode_typeof in /src/njs_vmcode.c.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | nginx | 1.20.2-r2 | — |
| Alpine v3.24 | njs | 0.7.1-r0 | — |
| Alpine v3.23 | nginx | 1.20.2-r2 | — |
| Alpine v3.23 | njs | 0.7.1-r0 | — |
| Alpine v3.22 | nginx | 1.20.2-r2 | — |
| Alpine v3.22 | njs | 0.7.1-r0 | — |
| Alpine v3.21 | nginx | 1.20.2-r2 | — |
| Alpine v3.21 | njs | 0.7.1-r0 | — |
| Alpine v3.20 | nginx | 1.20.2-r2 | — |
| Alpine v3.20 | njs | 0.7.1-r0 | — |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | nginx | 1.20.2-r2 | — |
| Alpine v3.19 | njs | 0.7.1-r0 | — |
| Alpine v3.18 | nginx | 1.20.2-r2 | — |
| Alpine v3.18 | njs | 0.7.1-r0 | — |
| Alpine v3.17 | nginx | 1.20.2-r2 | — |
| Alpine v3.17 | njs | 0.7.1-r0 | — |
| Alpine v3.16 | nginx | 1.20.2-r2 | — |
| Alpine v3.16 | njs | 0.7.1-r0 | — |
| Alpine v3.15 | njs | 0.7.1-r0 | — |