[FREEBSD:94B6264A-5140-11E3-8B22-F0DEF16C5C1B] nginx -- Request line parsing vulnerability

Severity High

Affected Packages 2

CVEs 1

The nginx project reports:

  Ivan Fratric of the Google Security Team discovered a bug in nginx, which might
   allow an attacker to bypass security restrictions in certain configurations by
   using a specially crafted request, or might have potential other impact
   (CVE-2013-4547).

Package	Affected Version
pkg:freebsd/nginx-devel	< 1.5.7
pkg:freebsd/nginx	< 1.4.4,1

ID

FREEBSD:94B6264A-5140-11E3-8B22-F0DEF16C5C1B

Severity

high

Severity from

CVE-2013-4547

URL

http://vuxml.freebsd.org/freebsd/94b6264a-5140-11e3-8b22-f0def16c5c1b.html

Published

2013-11-19T00:00:00
(10 years ago)

Modified

2013-11-19T00:00:00
(10 years ago)

Rights

FreeBSD VuXML Security Team

Other Advisories

Source	# ID	Name	URL
FreeBSD VuXML			http://mailman.nginx.org/pipermail/nginx-announce/2013/000125.html

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch	Patch / Fix
Affected	pkg:freebsd/nginx-devel		nginx-devel	< 1.5.7
Affected	pkg:freebsd/nginx		nginx	< 1.4.4,1

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date