Lucene search
HistoryApr 29, 2014 - 2:38 p.m.
CVE-2014-0088
cve-2014-0088
nginx
spdy
remote code execution
security vulnerability
7.4 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.015 Low
EPSS
Percentile
86.6%
The SPDY implementation in the ngx_http_spdy_module module in nginx 1.5.10 before 1.5.11, when running on a 32-bit platform, allows remote attackers to execute arbitrary code via a crafted request.
Related
prion
prion
Cross site request forgery (csrf)
2014-04-29 14:38:00
hackerone
hackerone
Internet Bug Bounty: SPDY memory corruption
2014-03-24 21:54:07
freebsd
freebsd
nginx -- SPDY memory corruption
2014-03-04 00:00:00
nessus
nessus
nginx 1.5.10 SPDY Memory Corruption
2014-05-06 00:00:00
nginx
nginx
SPDY memory corruption
2014-04-29 14:38:00
debiancve
debiancve
CVE-2014-0088
2014-04-29 14:38:00
ubuntucve
ubuntucve
CVE-2014-0088
2014-04-29 00:00:00
7.4 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.015 Low
EPSS
Percentile
86.6%
Related for CVE-2014-0088