nginx "ngx_http_parse_chunked()" Buffer Overflow Vulnerability
Last Update Date:
8 May 2013 10:41
Release Date:
8 May 2013
4201
Views
RISK: Medium Risk
TYPE: Servers - Web Servers
A vulnerability has been identified in nginx, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to an error within the "ngx_http_parse_chunked()" function (http/ngx_http_parse.c) when parsing an HTTP chunk and can be exploited to cause a stack-based buffer overflow.
Impact
- Remote Code Execution
System / Technologies affected
- nginx 1.3.9 / 1.4.0
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Update to version 1.5.0 or 1.4.1
Vulnerability Identifier
Source
Related Link
Share with