CVE-2013-2028

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105176.htmlThird Party Advisory
http://mailman.nginx.org/pipermail/nginx-announce/2013/000112.htmlMitigation, Patch, Vendor Advisory
http://nginx.org/download/patch.2013.chunked.txtPatch, Vendor Advisory
http://packetstormsecurity.com/files/121675/Nginx-1.3.9-1.4.0-Denial-Of-Service.htmlExploit, Third Party Advisory, VDB Entry
http://secunia.com/advisories/55181Third Party Advisory
http://security.gentoo.org/glsa/glsa-201310-04.xmlThird Party Advisory
http://www.osvdb.org/93037Broken Link
http://www.securityfocus.com/bid/59699Third Party Advisory, VDB Entry
http://www.vnsecurity.net/2013/05/analysis-of-nginx-cve-2013-2028/Broken Link
https://github.com/rapid7/metasploit-framework/pull/1834Patch, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105176.htmlThird Party Advisory
http://mailman.nginx.org/pipermail/nginx-announce/2013/000112.htmlMitigation, Patch, Vendor Advisory
http://nginx.org/download/patch.2013.chunked.txtPatch, Vendor Advisory
http://packetstormsecurity.com/files/121675/Nginx-1.3.9-1.4.0-Denial-Of-Service.htmlExploit, Third Party Advisory, VDB Entry
http://secunia.com/advisories/55181Third Party Advisory
http://security.gentoo.org/glsa/glsa-201310-04.xmlThird Party Advisory
http://www.osvdb.org/93037Broken Link
http://www.securityfocus.com/bid/59699Third Party Advisory, VDB Entry
http://www.vnsecurity.net/2013/05/analysis-of-nginx-cve-2013-2028/Broken Link
https://github.com/rapid7/metasploit-framework/pull/1834Patch, Third Party Advisory

Timeline

Published: Jul 20, 2013
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-20296.3nagios.upgrade_to_v3.sh, as distributed by Red Hat and possibly others for Nagios Core 3.4.4, 3.5.1, and earlier, allows local users to over CVE-2013-20302.1keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing cer CVE-2013-20314.3MediaWiki before 1.19.6 and 1.20.x before 1.20.5 allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by a CVE-2013-20325.0MediaWiki before 1.19.6 and 1.20.x before 1.20.5 does not allow extensions to prevent password changes without using both Special:PasswordRe CVE-2013-20332.1Cross-site scripting (XSS) vulnerability in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x b CVE-2013-20346.8Multiple cross-site request forgery (CSRF) vulnerabilities in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.CVE-2013-20354.4Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library pat CVE-2013-20364.3Cross-site scripting (XSS) vulnerability in the Filebrowser module 6.x-2.x before 6.x-2.2 for Drupal allows remote attackers to inject arbit CVE-2013-20372.6httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify that the server hostname matches a domain name in the CVE-2013-20384.3The NMEA0183 driver in gpsd before 3.9 allows remote attackers to cause a denial of service (daemon termination) and possibly execute arbitr CVE-2013-20394.0Directory traversal vulnerability in lib/files/view.php in ownCloud before 4.0.15, 4.5.x 4.5.11, and 5.x before 5.0.6 allows remote authenti CVE-2013-20403.5Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5.11, and 5.0.x before 5.0.6 allow remote auth