← Database

CVE-2009-2629

HIGH CVSS: 7.5 Published: 2009-09-15 Modified: 2026-06-16

Description

Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute arbitrary code via crafted HTTP requests.

Affected Platforms

F5 NginxDebian Debian LinuxFedoraproject Fedora

Weakness Type

CWE-787

References