CVE-2022-27008: Buffer Overflow
Published Apr 14, 2022
·Updated
nginx njs 0.7.2 is vulnerable to Buffer Overflow. Type confused in Array.prototype.concat() when a slow array appended element is fast array.
Affected Software
1 affected component
F5 Njs=0.7.2
Remediation
Patch Available
Event History
Apr 14, 2022
CVE Published
via MITRE·02:04 PM
Data Sourced
via MITRE·02:04 PM
Description
Frequently Asked Questions
1
What is CVE-2022-27008?
CVE-2022-27008 is a vulnerability in nginx njs 0.7.2 that allows for buffer overflow due to type confusion in Array.prototype.concat().
2
How severe is CVE-2022-27008?
CVE-2022-27008 has a severity rating of high with a CVSS score of 7.5.
3
Which software versions are affected by CVE-2022-27008?
CVE-2022-27008 affects nginx njs version 0.7.2.
4
How can I fix CVE-2022-27008?
To fix CVE-2022-27008, update nginx njs to a version that is not vulnerable.
5
Are there any references for CVE-2022-27008?
Yes, you can find references for CVE-2022-27008 at the following links: [Link 1](https://github.com/nginx/njs/commit/e673ae41a998d1391bd562edb2ed6d49db7cc716), [Link 2](https://github.com/nginx/njs/issues/471), [Link 3](https://security.netapp.com/advisory/ntap-20220519-0008/)