Vulnerabilities > CVE-2022-27007 - Use After Free vulnerability in F5 NJS 0.7.2

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
f5
CWE-416
critical

Summary

nginx njs 0.7.2 is affected suffers from Use-after-free in njs_function_frame_alloc() when it try to invoke from a restored frame saved with njs_function_frame_save().

Vulnerable Configurations

Part Description Count
Application
F5
1

Common Weakness Enumeration (CWE)