Vulnerabilities > CVE-2019-11838 - Out-of-bounds Write vulnerability in F5 NJS
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.splice after a resize, related to njs_array_prototype_splice in njs/njs_array.c, because of njs_array_expand size mishandling.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | F5
| 27 |