What is CVE-2009-3896?

CVE-2009-3896 is a vulnerability in F5 nginx, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2009-11-24.

Is CVE-2009-3896 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in F5 nginx

CVE-2009-3896

src/http/ngx_http_parse.c in nginx (aka Engine X) 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.14 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a long URI.

Vulnerability class: Buffer Overflow

EPSS: 0.113 (95.5th percentile) — read the EPSS interpretation.

Affected products

F5 Nginx — versions 0.1.0, 0.1.1, 0.1.2
Nginx — versions 0.6.1516
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

Public proof-of-concept exploits

addisonburkett/cve_

References

secalert@redhat.com (x_refsource_CONFIRM, Exploit)
secalert@redhat.com (vendor-advisory, x_refsource_FEDORA)
secalert@redhat.com (Exploit, Patch, vdb-entry, x_refsource_BID)
secalert@redhat.com (mailing-list, x_refsource_MLIST, Patch)
secalert@redhat.com (x_refsource_CONFIRM, Patch)
secalert@redhat.com (vendor-advisory, x_refsource_FEDORA)
secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (vendor-advisory, x_refsource_FEDORA)
secalert@redhat.com (vendor-advisory, x_refsource_DEBIAN)
secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)

Frequently asked questions

What is CVE-2009-3896?: CVE-2009-3896 is a vulnerability in F5 nginx, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2009-11-24.
Is CVE-2009-3896 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.