Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2013-2028
HistoryJul 20, 2013 - 3:37 a.m.

CVE-2013-2028

2013-07-2003:37:20
CWE-787
redhat
web.nvd.nist.gov
183
2
cve-2013-2028
nvd
remote code execution
denial of service
integer signedness error
buffer overflow

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.152

Percentile

95.9%

JSON

The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow.

Affected configurations

Nvd
Node
f5nginxRange1.3.9–1.4.0
Node
fedoraprojectfedoraMatch19
VendorProductVersionCPE
f5nginx*cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*
fedoraprojectfedora19cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*

Social References

More

Related

altlinux 1
exploitpack 2
prion 2
exploitdb 4
debiancve 2
zdt 1
fedora 2
ubuntucve 2
openvas 6
seebug 3
nginx 1
packetstorm 3
nessus 8
nvd 2
canvas 1
myhack58 1
metasploit 1
cvelist 2
cve 1
mageia 1
securityvulns 1
amazon 1
freebsd 1
gentoo 1
altlinux
altlinux
Security fix for the ALT Linux 9 package nginx version 1.4.1-alt1
2013-05-07 00:00:00
exploitpack
exploitpack
Nginx 1.3.9 1.4.0 - Denial of Service (PoC)
2013-05-17 00:00:00
Nginx 1.4.0 (Generic Linux x64) - Remote Overflow
2014-03-15 00:00:00
prion
prion
Stack overflow
2013-07-20 03:37:00
Design/Logic Flaw
2013-07-20 03:37:00
exploitdb
exploitdb
Nginx 1.3.9 < 1.4.0 - Denial of Service (PoC)
2013-05-17 00:00:00
Nginx 1.4.0 (Generic Linux x64) - Remote Overflow
2014-03-15 00:00:00
Nginx 1.3.9 < 1.4.0 - Chuncked Encoding Stack Buffer Overflow (Metasploit)
2013-05-28 00:00:00
debiancve
debiancve
CVE-2013-2028
2013-07-20 03:37:20
CVE-2013-2070
2013-07-20 03:37:25
zdt
zdt
Nginx HTTP Server 1.3.9-1.4.0 Chunked Encoding Stack Buffer Overflow
2013-05-24 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: nginx-1.4.1-1.fc19
2013-05-12 04:53:58
[SECURITY] Fedora 18 Update: nginx-1.2.9-1.fc18
2013-05-23 12:24:19
ubuntucve
ubuntucve
CVE-2013-2028
2013-07-20 00:00:00
CVE-2013-2070
2013-07-20 00:00:00
openvas
openvas
Nginx Chunked Transfer Encoding Stack Based Buffer Overflow Vulnerability
2013-05-21 00:00:00
Amazon Linux: Security Advisory (ALAS-2013-189)
2015-09-08 00:00:00
Fedora Update for nginx FEDORA-2013-8182
2013-05-27 00:00:00
seebug
seebug
nginx 1.3.9-1.4.0 - DoS PoC
2014-07-01 00:00:00
nginx 'ngx_http_parse.c'栈缓冲区溢出漏洞
2013-05-17 00:00:00
nginx 1.4.0 64-bit - Remote Exploit for Linux (Generic)
2014-07-01 00:00:00
nginx
nginx
Stack-based buffer overflow with specially crafted request
2013-07-20 03:37:20
packetstorm
packetstorm
Nginx 1.3.9 / 1.4.0 Denial Of Service
2013-05-17 00:00:00
Nginx HTTP Server 1.3.9-1.4.0 Chunked Encoding Stack Buffer Overflow
2013-05-23 00:00:00
Nginx 1.3.9 / 1.4.0 Buffer Overflow
2013-07-19 00:00:00
nessus
nessus
Fedora 19 : nginx-1.4.1-1.fc19 (2013-7560)
2013-05-13 00:00:00
nginx < 1.4.1 / 1.5.0 Multiple Vulnerabilities
2013-05-08 00:00:00
nginx ngx_http_proxy_module.c Multiple Vulnerabilities
2013-05-29 00:00:00
nvd
nvd
CVE-2013-2028
2013-07-20 03:37:20
CVE-2013-2070
2013-07-20 03:37:25
canvas
canvas
Immunity Canvas: NGINX_CHUNK
2013-07-20 03:37:00
myhack58
myhack58
BROP Attack of the Nginx remote code execution vulnerabilities analysis and use-vulnerability and early warning-the black bar safety net
2017-01-17 00:00:00
metasploit
metasploit
Nginx HTTP Server 1.3.9-1.4.0 Chunked Encoding Stack Buffer Overflow
2013-05-22 17:52:00
cvelist
cvelist
CVE-2013-2028
2013-07-18 01:00:00
CVE-2013-2070
2013-07-18 01:00:00
cve
cve
CVE-2013-2070
2013-07-20 03:37:25
mageia
mageia
Updated nginx package fixes security vulnerability
2013-06-06 16:24:33
securityvulns
securityvulns
nginx buffer overflow
2013-07-10 00:00:00
amazon
amazon
Medium: nginx
2013-05-14 15:35:00
freebsd
freebsd
nginx -- multiple vulnerabilities
2013-05-07 00:00:00
gentoo
gentoo
nginx: Multiple vulnerabilities
2013-10-06 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.152

Percentile

95.9%

JSON
Related for CVE-2013-2028
altlinux1exploitpack2prion2exploitdb4debiancve2zdt1fedora2ubuntucve2openvas6seebug3nginx1packetstorm3nessus8nvd2canvas1myhack581metasploit1cvelist2cve1mageia1securityvulns1amazon1freebsd1gentoo1