CVE-2013-2070

Description

http/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when proxy_pass is used with untrusted HTTP servers, allows remote attackers to cause a denial of service (crash) and obtain sensitive information from worker process memory via a crafted proxy response, a similar vulnerability to CVE-2013-2028.

Risk Information

Base Score

8.2

MODERATE

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

EPSS Score

Exploitation Probability

4.601

Associated Vulnerability

Vulnerability	OS Platform
Update Nginx to 9.1.19	Windows
Update Nginx to 9.1.5	Windows
Update Nginx to 9.1.8	Windows
Update Nginx to 9.2.14	Windows
Update Nginx to 9.2.19	Windows
Update Nginx to 9.2.3	Windows
Update Nginx to 9.2.7	Windows
Update Nginx to 9.3.10	Windows
Update Nginx to 9.3.15	Windows
Update Nginx to 9.3.17	Windows
Update Nginx to 9.1.19 (For Linux)	Linux
Update Nginx to 9.1.5 (For Linux)	Linux
Update Nginx to 9.1.8 (For Linux)	Linux
Update Nginx to 9.2.14 (For Linux)	Linux
Update Nginx to 9.2.19 (For Linux)	Linux
Update Nginx to 9.2.3 (For Linux)	Linux
Update Nginx to 9.2.7 (For Linux)	Linux
Update Nginx to 9.3.10 (For Linux)	Linux
Update Nginx to 9.3.15 (For Linux)	Linux
Update Nginx to 9.3.17 (For Linux)	Linux
CVE-2013-2070	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234