Valentin V. Bartenev
February 07, 2019 11:52AM
Hi,

A security issue was identified in NGINX Unit, which might allow an
attacker to cause a heap memory buffer overflow in the router process
with a specially crafted request. This may result in a denial of
service (router process crash) or other unspecified behavior
(CVE-2019-7401).

The issue affects Unit 0.3 - 1.7.
The issue is fixed in Unit 1.7.1.

wbr, Valentin V. Bartenev

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

Unit security advisory (CVE-2019-7401)

Valentin V. Bartenev February 07, 2019 11:52AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 117
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready