CVE-2009-2629
Description
Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute arbitrary code via crafted HTTP requests.
Risk Information
Base Score
9.8
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
80.762
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Update Nginx to 9.1.19 | Windows |
| Update Nginx to 9.1.5 | Windows |
| Update Nginx to 9.1.8 | Windows |
| Update Nginx to 9.2.14 | Windows |
| Update Nginx to 9.2.19 | Windows |
| Update Nginx to 9.2.3 | Windows |
| Update Nginx to 9.2.7 | Windows |
| Update Nginx to 9.3.10 | Windows |
| Update Nginx to 9.3.15 | Windows |
| Update Nginx to 9.3.17 | Windows |
| Update Nginx to 9.1.19 (For Linux) | Linux |
| Update Nginx to 9.1.5 (For Linux) | Linux |
| Update Nginx to 9.1.8 (For Linux) | Linux |
| Update Nginx to 9.2.14 (For Linux) | Linux |
| Update Nginx to 9.2.19 (For Linux) | Linux |
| Update Nginx to 9.2.3 (For Linux) | Linux |
| Update Nginx to 9.2.7 (For Linux) | Linux |
| Update Nginx to 9.3.10 (For Linux) | Linux |
| Update Nginx to 9.3.15 (For Linux) | Linux |
| Update Nginx to 9.3.17 (For Linux) | Linux |
| Out-of-bounds Write Vulnerability (CVE-2009-2629) | NCM |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234