Segmentation Violation in Nginx NJS Affects Specific Versions

CVE-2022-43284

Summary

A segmentation violation has been identified in Nginx NJS versions 0.7.2 through 0.7.4 due to a flaw in the njs_scope_valid_value function at njs_scope.h. Although the vendor, Nginx, asserts that this report's implications are minimal since NJS does not handle untrusted input, users should still remain vigilant in reviewing their implementations and consider upgrading to the latest version for improved security.

References