CVE-2022-34032: 
Linux Alpine vulnerability analysis and mitigation

Nginx NJS v0.7.5 contains a segmentation violation vulnerability in the function njs_value_own_enumerate located in src/njs_value.c. The vulnerability was discovered and disclosed on June 1, 2022 (GitHub Issue). This issue affects the NJS module, which is a subset of the NGINX server functionality.

The vulnerability is identified as CVE-2022-34032 and has received a CVSS v3.1 base score of 7.5 (High), with a vector string of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The issue manifests as a segmentation violation in the njs_value_own_enumerate function at src/njs_value.c:240:21, which can be triggered through specific JavaScript code execution (NVD Database).

The vulnerability affects system availability by causing a segmentation violation that can lead to a crash of the NGINX worker processes. This can result in service disruption for applications relying on the NJS module (NVD Database).

The vulnerability can be triggered through a specific sequence of JavaScript operations involving Object.defineProperty and AggregateError functions. A proof of concept exploit has been publicly documented that demonstrates how to trigger the segmentation violation (GitHub Issue).