Stack Overflow Vulnerability in Nginx NJS by Nginx

CVE-2022-29379

What is CVE-2022-29379?

A stack overflow vulnerability was identified in the Nginx NJS module version 0.7.3, specifically within the njs_default_module_loader function found in the njs_module.c source file. This flaw can potentially lead to unexpected behavior during execution. It is important to note that there is contention regarding the validity of the reported behavior, with multiple third-party sources indicating that it may occur exclusively in unreleased development code and not in stable versions 0.7.2, 0.7.3, or 0.7.4.

References