njs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via njs_vmcode_typeof in /src/njs_vmcode.c.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - njs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via
    njs_vmcode_typeof in /src/njs_vmcode.c. (CVE-2021-46461)

  - njs through 0.7.1, used in NGINX, was discovered to contain a segmentation violation via
    njs_object_set_prototype in /src/njs_object.c. (CVE-2021-46462)

  - njs through 0.7.1, used in NGINX, was discovered to contain a control flow hijack caused by a Type
    Confusion vulnerability in njs_promise_perform_then(). (CVE-2021-46463)

  - njs through 0.7.0, used in NGINX, was discovered to contain a heap use-after-free in njs_await_fulfilled.
    (CVE-2022-25139)

  - The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation
    can reset many streams quickly, as exploited in the wild in August through October 2023. (CVE-2023-44487)

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - njs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via
    njs_vmcode_typeof in /src/njs_vmcode.c. (CVE-2021-46461)

ID	Name	Product	Family	Type	Severity
424212	Alpine: multiple nginx packages: security update to 1.20.2-r2	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	medium
424212	Alpine: multiple nginx packages: security update to 1.20.2-r2	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	medium
405775	Alpine: libnjs, multiple njs packages: security update to 0.7.1-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	critical
405775	Alpine: libnjs, multiple njs packages: security update to 0.7.1-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	critical

Detections

Analytics

CVE-2021-46461

critical

Tenable Plugins

medium

medium

critical

critical