PT-2019-1582 · Nginx · Nginx Unit
Publicado
2019-02-07
·
Atualizado
2025-08-12
·
CVE-2019-7401
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
NGINX Unit versions prior to 1.7.1
Description
The issue is caused by a heap-based buffer overflow in the router process, potentially allowing an attacker to cause a denial of service (router process crash) or possibly have other unspecified impacts with a specially crafted request. The vulnerability may be exploited by a remote attacker to achieve these effects.
Recommendations
For NGINX Unit versions prior to 1.7.1, update to version 1.7.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the router process to minimize the risk of exploitation.
Correção
DoS
Memory Corruption
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Nginx Unit