Description
The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow.
Remediation
References
Related Vulnerabilities
MySQL CVE-2024-21166 Vulnerability (CVE-2024-21166)
WordPress Plugin Lazy Load Cross-Site Scripting (0.6)
WordPress Plugin RSS Redirect & Feedburner Alternative Unspecified Vulnerability (1.9)
WordPress Plugin WordPress Clean Up & Optimizer-Clean Up Optimizer SQL Injection (3.0.13)
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-35292)