The 'nginx' program is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

Updates are available. Please see the references for more information.

• http://nginx.net/
• http://nginx.net/CHANGES
• http://nginx.net/CHANGES-0.5
• http://nginx.net/CHANGES-0.6
• http://nginx.net/CHANGES-0.7
• http://www.kb.cert.org/vuls/id/180065
• http://www.securityfocus.com/bid/36384

---

Updated on 2015-03-25