nginx 'ngx_http_close_connection()' Remote Integer Overflow Vulnerability

Bugtraq ID:	59496
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 25 2013 12:00AM
Updated:	Mar 19 2015 09:48AM
Credit:	Safe3 of Qihoo 360
Vulnerable:	Igor Sysoev nginx 1.1.17 Igor Sysoev nginx 1.0.14 Igor Sysoev nginx 1.0.10 Igor Sysoev nginx 1.0.9 Igor Sysoev nginx 1.0.8 Igor Sysoev nginx 1.1.19 Igor Sysoev nginx 1.0.15
Not Vulnerable:

nginx 'ngx_http_close_connection()' Remote Integer Overflow Vulnerability

nginx is prone to a remote integer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

An attacker can exploit this issue to execute arbitrary code in the context of the application. Failed exploit attempts will likely crash the application.

nginx 'ngx_http_close_connection()' Remote Integer Overflow Vulnerability

The researcher who discovered the issue has created an exploit for demonstration, however the exploit code is not publicly available. Please see the references for more information.

nginx 'ngx_http_close_connection()' Remote Integer Overflow Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

nginx 'ngx_http_close_connection()' Remote Integer Overflow Vulnerability

References:

• nginx Homepage (Igor Sysoev)
  
• Nginx ngx_http_close_connection function integer overflow (safe3q)