[GLSA-201310-04] nginx: Multiple vulnerabilities
Multiple vulnerabilities have been found in nginx, the worst of which may allow execution of arbitrary code.
Background
nginx is a robust, small, and high performance HTTP and reverse proxy
server.
Description
Multiple vulnerabilities have been discovered in nginx. Please review
the CVE identifiers referenced below for details.
Impact
A remote attacker could send a specially crafted request, possibly
resulting in execution of arbitrary code with the privileges of the
process, or a Denial of Service condition. Furthermore, a
context-dependent attacker may be able to obtain sensitive information.
Workaround
There is no known workaround at this time.
Resolution
All nginx users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=www-servers/nginx-1.4.1-r2"
Package | Affected Version |
---|---|
pkg:ebuild/www-servers/nginx?distro=gentoo | < 1.4.1-r2 |
Package | Unaffected Version |
---|---|
pkg:ebuild/www-servers/nginx?distro=gentoo | >= 1.4.1-r2 |
- ID
- GLSA-201310-04
- Severity
- normal
- URL
- https://security.gentoo.org/glsa/201310-04
- Published
-
2013-10-06T00:00:00
(11 years ago) - Modified
-
2013-10-06T00:00:00
(11 years ago) - Rights
- Gentoo Foundation, Inc.
- Other Advisories
Source | # ID | Name | URL |
---|---|---|---|
CVE | CVE-2013-0337 | CVE-2013-0337 | https://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0337 |
CVE | CVE-2013-2028 | CVE-2013-2028 | https://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2028 |
CVE | CVE-2013-2070 | CVE-2013-2070 | https://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2070 |
Bugzilla | 458726 | Bugzilla #458726 | https://bugs.gentoo.org/show_bug.cgi?id=458726 |
Bugzilla | 468870 | Bugzilla #468870 | https://bugs.gentoo.org/show_bug.cgi?id=468870 |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |