nginx is prone to a remote heap-based buffer-overflow vulnerability. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. Versions prior to nginx 1.0.10 are vulnerable.

Vendor updates are available. Please see the references for more information.

• http://nginx.org/
• http://trac.nginx.org/nginx/changeset/4268/nginx
• http://www.nginx.org/en/CHANGES
• http://www.securityfocus.com/bid/50710

---

Updated on 2015-03-25