CVE-2014-0088

nginx 1.5.10 - Remote Code Execution via SPDY Request Handling

Title source: llm

Description

The SPDY implementation in the ngx_http_spdy_module module in nginx 1.5.10 before 1.5.11, when running on a 32-bit platform, allows remote attackers to execute arbitrary code via a crafted request.

References (2)

Core 2

Core References

Patch mailing-list x_refsource_mlist

http://mailman.nginx.org/pipermail/nginx-announce/2014/000132.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1030150

Scores

EPSS 0.0271

EPSS Percentile 86.1%

Details

CWE

CWE-119

Status published

Products (1)

f5/nginx 1.5.10

Published Apr 29, 2014

Tracked Since Feb 18, 2026