Total vulnerabilities in the database
The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow.
| Software | From | Fixed in |
|---|---|---|
| f5 / nginx | 1.3.9 | 1.4.0.x |
| fedoraproject / fedora | 19 | 19.x |