CVE-2014-0133

Description

Heap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.5.x before 1.5.12 allows remote attackers to execute arbitrary code via a crafted request.

Risk Information

Base Score

9.8

MODERATE

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

20.913

Associated Vulnerability

Vulnerability	OS Platform
Update Nginx to 9.1.19	Windows
Update Nginx to 9.1.5	Windows
Update Nginx to 9.1.8	Windows
Update Nginx to 9.2.14	Windows
Update Nginx to 9.2.19	Windows
Update Nginx to 9.2.3	Windows
Update Nginx to 9.2.7	Windows
Update Nginx to 9.3.10	Windows
Update Nginx to 9.3.15	Windows
Update Nginx to 9.3.17	Windows
Update Nginx to 9.1.19 (For Linux)	Linux
Update Nginx to 9.1.5 (For Linux)	Linux
Update Nginx to 9.1.8 (For Linux)	Linux
Update Nginx to 9.2.14 (For Linux)	Linux
Update Nginx to 9.2.19 (For Linux)	Linux
Update Nginx to 9.2.3 (For Linux)	Linux
Update Nginx to 9.2.7 (For Linux)	Linux
Update Nginx to 9.3.10 (For Linux)	Linux
Update Nginx to 9.3.15 (For Linux)	Linux
Update Nginx to 9.3.17 (For Linux)	Linux
Out-of-bounds Write Vulnerability (CVE-2014-0133)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234