Vulnerabilities > CVE-2019-11838 - Out-of-bounds Write vulnerability in F5 NJS
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.splice after a resize, related to njs_array_prototype_splice in njs/njs_array.c, because of njs_array_expand size mishandling.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | F5
| 27 |