CVE-2013-2028
HIGH 7.5EPSS 87.5%
The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow.
- CVSS v2.0 NVD
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 87.48% chance of exploitation in the next 30 days, 100th percentile
- Published
- 2013-07-18
- Updated
- 2024-08-06
Proof-of-concept exploits (8)
- http://packetstormsecurity.com/files/121675/Nginx-1.3.9-1.4.0-Denial-Of-Service.html
- BJ-PXD/Explotacion-de-Vulnerabiliddes-bee-box0★ · 2024-08-28
- Sunqiz/CVE-2013-2028-reproduction0★ · 2022-08-15
- jptr218/nginxhack1★ · 2021-07-27
- m4drat/CVE-2013-2028-Exploit19★ · 2020-06-27
- mertsarica/hack4career86★ · 2025-08-31
- tachibana51/CVE-2013-2028-x64-bypass-ssp-and-pie-PoC2★ · 2019-08-03
- vanivamshi/CVE-2013-2028-Exploit0★ · 2026-09-13
Metasploit modules (1)
ExploitDB entries (4)
- https://www.exploit-db.com/exploits/25775
- https://www.exploit-db.com/exploits/32277
- https://www.exploit-db.com/exploits/26737
- https://www.exploit-db.com/exploits/25499
Security advisories
- http://mailman.nginx.org/pipermail/nginx-announce/2013/000112.html
- http://nginx.org/download/patch.2013.chunked.txt
- http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105176.html
- http://secunia.com/advisories/55181
- http://security.gentoo.org/glsa/glsa-201310-04.xml
- http://www.securityfocus.com/bid/59699
- rapid7/metasploit-framework/pull/1834