{"id":"CVE-2022-31307","details":"Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_string_offset at src/njs_string.c.","modified":"2026-08-12T13:32:31.414287Z","published":"2022-06-21T12:57:31Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31307.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31307.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-31307"},{"type":"REPORT","url":"https://github.com/nginx/njs/issues/482"},{"type":"FIX","url":"https://github.com/nginx/njs/commit/eafe4c7a326b163612f10861392622b5da5b1792"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/nginx/njs","events":[{"introduced":"50bb20a814c3c82b662c999630ce91ff068e3e48"},{"fixed":"eafe4c7a326b163612f10861392622b5da5b1792"}],"database_specific":{"source":["CPE_STRING","REFERENCES"],"cpe":"cpe:2.3:a:f5:njs:0.7.2:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0.7.2"},{"last_affected":"0.7.2"}]}}],"versions":["0.7.2","0.7.3"],"database_specific":{"vanir_signatures_modified":"2026-08-12T13:32:31Z","vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"103444818782418243579072543539988804643","length":2727},"id":"CVE-2022-31307-1f6846bf","signature_type":"Function","signature_version":"v1","source":"https://github.com/nginx/njs/commit/eafe4c7a326b163612f10861392622b5da5b1792","target":{"function":"njs_object_iterate_reverse","file":"src/njs_iterator.c"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/nginx/njs/commit/eafe4c7a326b163612f10861392622b5da5b1792","target":{"file":"src/njs_iterator.c"},"deprecated":false,"digest":{"line_hashes":["31332087060590309975530342363338135404","81384505419341664089187724240160896991","279086156151675448253248787254774324798","229719608985720382728834512096249842775","307488796212254766280894295833538516605","102801281721691388712997364811092385682"],"threshold":0.9},"id":"CVE-2022-31307-6ec364fd"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/nginx/njs/commit/eafe4c7a326b163612f10861392622b5da5b1792","target":{"file":"src/test/njs_unit_test.c"},"deprecated":false,"digest":{"line_hashes":["270962405635539349045306700829155569547","46702355503848243507095770144150209238","322332007203446702768211235095523626994"],"threshold":0.9},"id":"CVE-2022-31307-9585d335"}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-31307.json"}}],"schema_version":"1.9.0"}