CVE-2013-2028: f5 nginx Out-of-bounds Write

EPSS trend

Probability

87.48%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

0.00 pp

From 87.48% on 19-09-2026

19-09-202619-10-2026

EPSS score

87.48%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

6 found

referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
exploit-databasedoslinuxUnverified
Nginx 1.3.9 < 1.4.0 - Denial of Service (PoC)
Maturity: poc
exploit-databaseremotelinuxVerified
Nginx 1.3.9 < 1.4.0 - Chuncked Encoding Stack Buffer Overflow (Metasploit)
Maturity: weaponized

Show all 6 exploits

exploit-databaseremotelinux_x86Unverified
Nginx 1.3.9/1.4.0 (x86) - Brute Force
Maturity: poc
exploit-databaseremotelinux_x86-64Unverified
Nginx 1.4.0 (Generic Linux x64) - Remote Overflow
Maturity: poc
MetasploitremoteVerified
Nginx HTTP Server 1.3.9-1.4.0 Chunked Encoding Stack Buffer Overflow
exploit/linux/http/nginx_chunked_size
Maturity: weaponized

References

10 links

mailman.nginx.org/pipermail/nginx-announce/2013/000112.htmlMailing ListX Refsource MLISTMitigationPatchVendor Advisory
www.osvdb.org/93037VDB EntryX Refsource OSVDBBroken Link
lists.fedoraproject.org/pipermail/package-announce/2013-May/105176.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
www.vnsecurity.net/2013/05/analysis-of-nginx-cve-2013-2028/X Refsource MISCBroken Link
secunia.com/advisories/55181Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/59699VDB EntryX Refsource BIDThird Party Advisory
security.gentoo.org/glsa/glsa-201310-04.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
github.com/rapid7/metasploit-framework/pull/1834X Refsource MISCPatchThird Party Advisory
nginx.org/download/patch.2013.chunked.txtX Refsource MISCPatchVendor Advisory
packetstormsecurity.com/files/121675/Nginx-1.3.9-1.4.0-Denial-Of-Service.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry

Related vulnerabilities

CVE-2018-16843alpinenginx+847.98%7y ago07-11-2018 14:00nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption. This issue affects nginx compiled with the ngx_http_v2_module (not compiled by default) if the 'http2' option of the 'listen' directive is used in a configuration file.CVE-2018-16845alpinenginx+109.84%7y ago07-11-2018 14:00nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an attacker to cause infinite loop in a worker process, cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted mp4 file. The issue only affects nginx if it is built with the ngx_http_mp4_module (the module is not built by default) and the .mp4. directive is used in the configuration file. Further, the attack is only possible if an attacker is able to trigger processing of a specially crafted mp4 file with the ngx_http_mp4_module.CVE-2018-16844alpinenginx+712.73%7y ago07-11-2018 14:00nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive CPU usage. This issue affects nginx compiled with the ngx_http_v2_module (not compiled by default) if the 'http2' option of the 'listen' directive is used in a configuration file.CVE-2018-1111fedoradhcp+1497.86%8y ago17-05-2018 16:00DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.CVE-2018-7262fedoraprojectfedora+282.87%8y ago19-03-2018 21:00In Ceph before 12.2.3 and 13.x through 13.0.1, the rgw_civetweb.cc RGWCivetWeb::init_env function in radosgw doesn't handle malformed HTTP headers properly, allowing for denial of service.CVE-2018-5730debiankrb5+72.24%8y ago06-03-2018 20:00MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN.

All vulnerabilities innginx fedora

CVE-2013-2028: f5 nginx Out-of-bounds Write

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References