p PatchFirst

CVE-2009-2629

CVE-2009-2629

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute arbitrary code via crafted HTTP requests.

EPSS 75.1% · Public exploit · Fix available

Published
Updated

Stack: system · web

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • nginx Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.7.61-3

    Update to 0.7.61-3

  • nginx Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.7.61-3

    Update to 0.7.61-3

  • nginx Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.7.61-3

    Update to 0.7.61-3

Original sources

Check your server →