Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2013-2028HistoryJul 20, 2013 - 3:37 a.m.
CVE-2013-2028
2013-07-2003:37:20
Debian Security Bug Tracker
security-tracker.debian.org
34
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.152
Percentile
95.9%
The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | nginx | <Β 1.22.1-9 | nginx_1.22.1-9_all.deb |
| Debian | 11 | all | nginx | <Β 1.18.0-6.1+deb11u3 | nginx_1.18.0-6.1+deb11u3_all.deb |
| Debian | 999 | all | nginx | <Β 1.26.0-2 | nginx_1.26.0-2_all.deb |
| Debian | 13 | all | nginx | <Β 1.26.0-2 | nginx_1.26.0-2_all.deb |
Related
altlinux
altlinux
Security fix for the ALT Linux 9 package nginx version 1.4.1-alt1
2013-05-07 00:00:00
exploitpack
exploitpack
Nginx 1.3.9 1.4.0 - Denial of Service (PoC)
2013-05-17 00:00:00
Nginx 1.4.0 (Generic Linux x64) - Remote Overflow
2014-03-15 00:00:00
prion
prion
Stack overflow
2013-07-20 03:37:00
Design/Logic Flaw
2013-07-20 03:37:00
exploitdb
exploitdb
Nginx 1.3.9 < 1.4.0 - Denial of Service (PoC)
2013-05-17 00:00:00
Nginx 1.4.0 (Generic Linux x64) - Remote Overflow
2014-03-15 00:00:00
zdt
zdt
Nginx HTTP Server 1.3.9-1.4.0 Chunked Encoding Stack Buffer Overflow
2013-05-24 00:00:00
nessus
nessus
Fedora 19 : nginx-1.4.1-1.fc19 (2013-7560)
2013-05-13 00:00:00
nginx < 1.4.1 / 1.5.0 Multiple Vulnerabilities
2013-05-08 00:00:00
nginx ngx_http_proxy_module.c Multiple Vulnerabilities
2013-05-29 00:00:00
seebug
seebug
nginx 'ngx_http_parse.c'ζ ηΌε²εΊζΊ’εΊζΌζ΄
2013-05-17 00:00:00
nginx 1.3.9-1.4.0 - DoS PoC
2014-07-01 00:00:00
nginx 1.4.0 64-bit - Remote Exploit for Linux (Generic)
2014-07-01 00:00:00
nvd
nvd
CVE-2013-2028
2013-07-20 03:37:20
CVE-2013-2070
2013-07-20 03:37:25
packetstorm
packetstorm
Nginx HTTP Server 1.3.9-1.4.0 Chunked Encoding Stack Buffer Overflow
2013-05-23 00:00:00
Nginx 1.3.9 / 1.4.0 Denial Of Service
2013-05-17 00:00:00
Nginx 1.3.9 / 1.4.0 Buffer Overflow
2013-07-19 00:00:00
canvas
canvas
Immunity Canvas: NGINX_CHUNK
2013-07-20 03:37:00
fedora
fedora
[SECURITY] Fedora 19 Update: nginx-1.4.1-1.fc19
2013-05-12 04:53:58
[SECURITY] Fedora 18 Update: nginx-1.2.9-1.fc18
2013-05-23 12:24:19
ubuntucve
ubuntucve
CVE-2013-2028
2013-07-20 00:00:00
CVE-2013-2070
2013-07-20 00:00:00
openvas
openvas
Nginx Chunked Transfer Encoding Stack Based Buffer Overflow Vulnerability
2013-05-21 00:00:00
Fedora Update for nginx FEDORA-2013-8182
2013-05-27 00:00:00
Amazon Linux: Security Advisory (ALAS-2013-189)
2015-09-08 00:00:00
nginx
nginx
Stack-based buffer overflow with specially crafted request
2013-07-20 03:37:20
cve
cve
CVE-2013-2028
2013-07-20 03:37:20
CVE-2013-2070
2013-07-20 03:37:25
myhack58
myhack58
metasploit
metasploit
Nginx HTTP Server 1.3.9-1.4.0 Chunked Encoding Stack Buffer Overflow
2013-05-22 17:52:00
cvelist
cvelist
CVE-2013-2028
2013-07-18 01:00:00
CVE-2013-2070
2013-07-18 01:00:00
securityvulns
securityvulns
nginx buffer overflow
2013-07-10 00:00:00
mageia
mageia
Updated nginx package fixes security vulnerability
2013-06-06 16:24:33
amazon
amazon
Medium: nginx
2013-05-14 15:35:00
debiancve
debiancve
CVE-2013-2070
2013-07-20 03:37:25
freebsd
freebsd
nginx -- multiple vulnerabilities
2013-05-07 00:00:00
gentoo
gentoo
nginx: Multiple vulnerabilities
2013-10-06 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.152
Percentile
95.9%
Related for DEBIANCVE:CVE-2013-2028