First published: Sun Apr 09 2023(Updated: )
Nginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njs_vmcode_return at src/njs_vmcode.c.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
F5 Njs | =0.7.10 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this Nginx NJS vulnerability is CVE-2023-27729.
The severity level of CVE-2023-27729 is high (7.5).
The software version affected by CVE-2023-27729 is Nginx NJS v0.7.10.
CVE-2023-27729 allows an attacker to perform an illegal memcpy, leading to potential code execution or denial of service.
Currently, there is no available fix for CVE-2023-27729. It is recommended to update to the latest version when a fix becomes available.