Nginx Chunked Transfer Encoding Stack Based Buffer Overflow Vulnerability

  1. Network Vulnerabilities
  2. Buffer overflow
  3. Nginx Chunked Transfer Encoding Stack Based Buffer Overflow Vulnerability
Summary
The host is running Nginx and is prone stack buffer overflow vulnerability.
Impact
Successful exploitation will let the remote unauthenticated attackers to cause a buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code. Impact Level: System/Application
Solution
Upgrade to Nginx version 1.5.0, 1.4.1 or later, http://nginx.org/
Insight
A stack-based buffer overflow will occur in a worker process while handling certain chunked transfer encoding requests.
Affected
Nginx version 1.3.9 through 1.4.0
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities