{"id":"CVE-2022-29369","details":"Nginx NJS v0.7.2 was discovered to contain a segmentation violation via njs_lvlhsh_bucket_find at njs_lvlhsh.c.","modified":"2026-08-12T13:32:32.541377Z","published":"2022-05-12T18:48:42Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29369.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29369.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29369"},{"type":"REPORT","url":"https://github.com/nginx/njs/issues/467"},{"type":"FIX","url":"https://github.com/nginx/njs/commit/222d6fdcf0c6485ec8e175f3a7b70d650c234b4e"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/nginx/njs","events":[{"introduced":"50bb20a814c3c82b662c999630ce91ff068e3e48"},{"fixed":"222d6fdcf0c6485ec8e175f3a7b70d650c234b4e"}],"database_specific":{"cpe":"cpe:2.3:a:f5:njs:0.7.2:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0.7.2"},{"last_affected":"0.7.2"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["0.7.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-29369.json","vanir_signatures_modified":"2026-08-12T13:32:32Z","vanir_signatures":[{"source":"https://github.com/nginx/njs/commit/222d6fdcf0c6485ec8e175f3a7b70d650c234b4e","target":{"file":"src/njs_vmcode.c"},"deprecated":false,"digest":{"line_hashes":["175810938689306307151989758938324830392","180703331715133232550731353903580460069","257687700515119752060853364737589949899","201715238112720295438944879166792311002","86923884048140837451821738852591075233","151539192229205972088332502047357359123","320979593805069523545407758307501457704","251462602731947865340571933625060618058","141237680761797995961273377335536878984","215895325570199931832640693944774457452","51559773004152251879208073319942502774","143231716330137716612267197204713042554","172795507435902619979286648356063634762","290427967150929695050296094226983982013","105803064134099642247227259911095218386","233295550805243044926178074394196479305","119734970276082523690767603892505989894","290427967150929695050296094226983982013","98385400436157425460867402775036451519","5168429043744573656665556283788086544"],"threshold":0.9},"id":"CVE-2022-29369-89956614","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"240803892515240890895402971671006348816","length":16617},"id":"CVE-2022-29369-b32f9508","signature_type":"Function","signature_version":"v1","source":"https://github.com/nginx/njs/commit/222d6fdcf0c6485ec8e175f3a7b70d650c234b4e","target":{"file":"src/njs_vmcode.c","function":"njs_vmcode_interpreter"}},{"deprecated":false,"digest":{"line_hashes":["133478195713163801148079192355661780482","320995026320866511970333713561071258808","89133782025725445036970021207302582100"],"threshold":0.9},"id":"CVE-2022-29369-bb03f80d","signature_type":"Line","signature_version":"v1","source":"https://github.com/nginx/njs/commit/222d6fdcf0c6485ec8e175f3a7b70d650c234b4e","target":{"file":"src/test/njs_unit_test.c"}}]}}],"schema_version":"1.9.0"}