CVE-2014-0133

N/A Unknown

Published: March 28, 2014 Modified: May 06, 2026

Description

Heap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.5.x before 1.5.12 allows remote attackers to execute arbitrary code via a crafted request.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2014-03/msg00095.html

Source: secalert@redhat.com

Mailing List Third Party Advisory

http://mailman.nginx.org/pipermail/nginx-announce/2014/000135.html

Source: secalert@redhat.com

Vendor Advisory

http://www.securityfocus.com/bid/66537

Source: secalert@redhat.com

Third Party Advisory VDB Entry

http://lists.opensuse.org/opensuse-updates/2014-03/msg00095.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List Third Party Advisory

http://mailman.nginx.org/pipermail/nginx-announce/2014/000135.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/66537

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory VDB Entry

6 reference(s) from NVD

Quick Stats

CVSS v3 Score

N/A / 10.0

EPSS (Exploit Probability)

18.6%

95th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-787

Affected Vendors

f5 opensuse

Related CVEs