Signature Detail

HTTP: Nginx Chunked Transfer Parsing Denial of Service

This signature detects attempts to exploit a known flaw in Nginx. A successful attack can result in a denial-of-service condition.

Extended Description

http/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when proxy_pass is used with untrusted HTTP servers, allows remote attackers to cause a denial of service (crash) and obtain sensitive information from worker process memory via a crafted proxy response, a similar vulnerability to CVE-2013-2028.

Affected Products

• igor_sysoev nginx 1.1.10
• igor_sysoev nginx 1.1.11
• igor_sysoev nginx 1.1.12
• igor_sysoev nginx 1.1.13
• igor_sysoev nginx 1.1.15
• igor_sysoev nginx 1.1.16
• igor_sysoev nginx 1.1.17
• igor_sysoev nginx 1.1.18
• igor_sysoev nginx 1.1.19
• igor_sysoev nginx 1.1.4
• igor_sysoev nginx 1.1.6
• igor_sysoev nginx 1.1.7
• igor_sysoev nginx 1.1.8
• igor_sysoev nginx 1.1.9
• igor_sysoev nginx 1.2.0
• igor_sysoev nginx 1.2.1
• igor_sysoev nginx 1.2.2
• igor_sysoev nginx 1.2.3
• igor_sysoev nginx 1.2.4
• igor_sysoev nginx 1.2.5
• igor_sysoev nginx 1.2.6
• igor_sysoev nginx 1.2.7
• igor_sysoev nginx 1.2.8
• igor_sysoev nginx 1.3.0
• igor_sysoev nginx 1.3.1
• igor_sysoev nginx 1.3.10
• igor_sysoev nginx 1.3.11
• igor_sysoev nginx 1.3.12
• igor_sysoev nginx 1.3.13
• igor_sysoev nginx 1.3.14
• igor_sysoev nginx 1.3.15
• igor_sysoev nginx 1.3.16
• igor_sysoev nginx 1.3.2
• igor_sysoev nginx 1.3.3
• igor_sysoev nginx 1.3.4
• igor_sysoev nginx 1.3.5
• igor_sysoev nginx 1.3.6
• igor_sysoev nginx 1.3.7
• igor_sysoev nginx 1.3.8
• igor_sysoev nginx 1.3.9
• igor_sysoev nginx 1.4.0

References

• CVE: CVE-2013-2070