Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-2028
HistoryJul 20, 2013 - 3:37 a.m.

CVE-2013-2028

2013-07-2003:37:20
CWE-787
[email protected]
web.nvd.nist.gov
6

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

High

EPSS

0.152

Percentile

95.9%

JSON

The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow.

Affected configurations

Nvd
Node
f5nginxRange1.3.9–1.4.0
Node
fedoraprojectfedoraMatch19

Related

altlinux 1
exploitpack 2
debiancve 2
prion 2
zdt 1
nessus 8
packetstorm 3
canvas 1
seebug 3
fedora 2
openvas 6
nginx 1
ubuntucve 2
metasploit 1
cvelist 2
cve 2
myhack58 1
exploitdb 3
nvd 1
securityvulns 1
amazon 1
freebsd 1
mageia 1
gentoo 1
altlinux
altlinux
Security fix for the ALT Linux 9 package nginx version 1.4.1-alt1
2013-05-07 00:00:00
exploitpack
exploitpack
Nginx 1.3.9 1.4.0 - Denial of Service (PoC)
2013-05-17 00:00:00
Nginx 1.4.0 (Generic Linux x64) - Remote Overflow
2014-03-15 00:00:00
debiancve
debiancve
CVE-2013-2028
2013-07-20 03:37:20
CVE-2013-2070
2013-07-20 03:37:25
prion
prion
Stack overflow
2013-07-20 03:37:00
Design/Logic Flaw
2013-07-20 03:37:00
zdt
zdt
Nginx HTTP Server 1.3.9-1.4.0 Chunked Encoding Stack Buffer Overflow
2013-05-24 00:00:00
nessus
nessus
Fedora 19 : nginx-1.4.1-1.fc19 (2013-7560)
2013-05-13 00:00:00
nginx ngx_http_proxy_module.c Multiple Vulnerabilities
2013-05-29 00:00:00
nginx < 1.4.1 / 1.5.0 Multiple Vulnerabilities
2013-05-08 00:00:00
packetstorm
packetstorm
Nginx HTTP Server 1.3.9-1.4.0 Chunked Encoding Stack Buffer Overflow
2013-05-23 00:00:00
Nginx 1.3.9 / 1.4.0 Denial Of Service
2013-05-17 00:00:00
Nginx 1.3.9 / 1.4.0 Buffer Overflow
2013-07-19 00:00:00
canvas
canvas
Immunity Canvas: NGINX_CHUNK
2013-07-20 03:37:00
seebug
seebug
nginx 'ngx_http_parse.c'ζ ˆηΌ“ε†²εŒΊζΊ’ε‡ΊζΌζ΄ž
2013-05-17 00:00:00
nginx 1.3.9-1.4.0 - DoS PoC
2014-07-01 00:00:00
nginx 1.4.0 64-bit - Remote Exploit for Linux (Generic)
2014-07-01 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: nginx-1.4.1-1.fc19
2013-05-12 04:53:58
[SECURITY] Fedora 18 Update: nginx-1.2.9-1.fc18
2013-05-23 12:24:19
openvas
openvas
Nginx Chunked Transfer Encoding Stack Based Buffer Overflow Vulnerability
2013-05-21 00:00:00
Amazon Linux: Security Advisory (ALAS-2013-189)
2015-09-08 00:00:00
Fedora Update for nginx FEDORA-2013-8182
2013-05-27 00:00:00
nginx
nginx
Stack-based buffer overflow with specially crafted request
2013-07-20 03:37:20
ubuntucve
ubuntucve
CVE-2013-2028
2013-07-20 00:00:00
CVE-2013-2070
2013-07-20 00:00:00
metasploit
metasploit
Nginx HTTP Server 1.3.9-1.4.0 Chunked Encoding Stack Buffer Overflow
2013-05-22 17:52:00
cvelist
cvelist
CVE-2013-2028
2013-07-18 01:00:00
CVE-2013-2070
2013-07-18 01:00:00
cve
cve
CVE-2013-2028
2013-07-20 03:37:20
CVE-2013-2070
2013-07-20 03:37:25
myhack58
myhack58
BROP Attack of the Nginx remote code execution vulnerabilities analysis and use-vulnerability and early warning-the black bar safety net
2017-01-17 00:00:00
exploitdb
exploitdb
Nginx 1.3.9 &lt; 1.4.0 - Denial of Service (PoC)
2013-05-17 00:00:00
Nginx 1.4.0 (Generic Linux x64) - Remote Overflow
2014-03-15 00:00:00
Nginx 1.3.9 &lt; 1.4.0 - Chuncked Encoding Stack Buffer Overflow (Metasploit)
2013-05-28 00:00:00
nvd
nvd
CVE-2013-2070
2013-07-20 03:37:25
securityvulns
securityvulns
nginx buffer overflow
2013-07-10 00:00:00
amazon
amazon
Medium: nginx
2013-05-14 15:35:00
freebsd
freebsd
nginx -- multiple vulnerabilities
2013-05-07 00:00:00
mageia
mageia
Updated nginx package fixes security vulnerability
2013-06-06 16:24:33
gentoo
gentoo
nginx: Multiple vulnerabilities
2013-10-06 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

High

EPSS

0.152

Percentile

95.9%

JSON
Related for NVD:CVE-2013-2028
altlinux1exploitpack2debiancve2prion2zdt1nessus8packetstorm3canvas1seebug3fedora2openvas6nginx1ubuntucve2metasploit1cvelist2cve2myhack581exploitdb3nvd1securityvulns1amazon1freebsd1mageia1gentoo1