PT-2009-6118 · Nginx · Nginx

Josh Bressers

·

Publicado

2009-11-24

·

Atualizado

2021-11-10

·

CVE-2009-3896

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions nginx versions 0.1.0 through 0.4.14 nginx versions 0.5.x before 0.5.38 nginx versions 0.6.x before 0.6.39 nginx versions 0.7.x before 0.7.62 nginx versions 0.8.x before 0.8.14
Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and worker process crash, via a long URI.
Recommendations For versions 0.1.0 through 0.4.14, update to a version after 0.4.14. For versions 0.5.x before 0.5.38, update to version 0.5.38 or later. For versions 0.6.x before 0.6.39, update to version 0.6.39 or later. For versions 0.7.x before 0.7.62, update to version 0.7.62 or later. For versions 0.8.x before 0.8.14, update to version 0.8.14 or later.

Exploit

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-3896
DSA-1920-1

Produtos afetados

Nginx