CVE-2014-0133
published 2014-03-28CVE-2014-0133: Heap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.5.x before 1.5.12 allows remote attackers to execute arbitrary code…
PriorityP350high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
9.29%
94.8th percentile
Heap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.5.x before 1.5.12 allows remote attackers to execute arbitrary code via a crafted request.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | nginx | < nginx 1.4.7-1 (bookworm) | nginx 1.4.7-1 (bookworm) |
| f5 | nginx | >= 0 < 1.4.7-1 | 1.4.7-1 |
| f5 | nginx | >= 0 < 1.4.7-1 | 1.4.7-1 |
| f5 | nginx | >= 0 < 1.4.7-1 | 1.4.7-1 |
| f5 | nginx | >= 0 < 1.4.7-1 | 1.4.7-1 |
| f5 | nginx | >= 1.3.15 < 1.4.7 | 1.4.7 |
| f5 | nginx | 1.5.0 – 1.5.11 | — |
| opensuse | opensuse | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH
vendor_debian7.5LOW
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
nginx: heap-based buffer overflow in SPDY implementation
vendor_redhat·2014-03-18·CVSS 7.5
CVE-2014-0133 [HIGH] CWE-122 nginx: heap-based buffer overflow in SPDY implementation
nginx: heap-based buffer overflow in SPDY implementation
Heap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.5.x before 1.5.12 allows remote attackers to execute arbitrary code via a crafted request.
Package: nginx14-nginx (Red Hat Software Collections) - Not affected
Debian
CVE-2014-0133: nginx - Heap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4...
vendor_debian·2014·CVSS 7.5
CVE-2014-0133 [HIGH] CVE-2014-0133: nginx - Heap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4...
Heap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.5.x before 1.5.12 allows remote attackers to execute arbitrary code via a crafted request.
Scope: local
bookworm: resolved (fixed in 1.4.7-1)
bullseye: resolved (fixed in 1.4.7-1)
forky: resolved (fixed in 1.4.7-1)
sid: resolved (fixed in 1.4.7-1)
trixie: resolved (fixed in 1.4.7-1)
VulDB
nginx up to 1.5.11 SPDY SPDY Request memory corruption (Nessus ID 73519 / ID 13264)
vuldb·2026-05-09·CVSS 7.5
CVE-2014-0133 [HIGH] nginx up to 1.5.11 SPDY SPDY Request memory corruption (Nessus ID 73519 / ID 13264)
A vulnerability marked as critical has been reported in nginx. The affected element is an unknown function of the component SPDY Handler. The manipulation as part of SPDY Request leads to memory corruption.
This vulnerability is documented as CVE-2014-0133. The attack can be initiated remotely. There is not any exploit available.
It is suggested to upgrade the affected component.
GHSA
GHSA-m342-r7h7-vj42: Heap-based buffer overflow in the SPDY implementation in nginx 1
ghsa_unreviewed·2022-05-13
CVE-2014-0133 [HIGH] CWE-787 GHSA-m342-r7h7-vj42: Heap-based buffer overflow in the SPDY implementation in nginx 1
Heap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.5.x before 1.5.12 allows remote attackers to execute arbitrary code via a crafted request.
OSV
CVE-2014-0133: Heap-based buffer overflow in the SPDY implementation in nginx 1
osv·2014-03-28·CVSS 7.5
CVE-2014-0133 [HIGH] CVE-2014-0133: Heap-based buffer overflow in the SPDY implementation in nginx 1
Heap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.5.x before 1.5.12 allows remote attackers to execute arbitrary code via a crafted request.
No detection rules found.
No public exploits indexed.
HackerOne
Exposed, outdated nginx server (v1.4.6) potentially vulnerable to heap-based buffer overflow & RCE
hackerone·2016-10-15·CVSS 7.5
[HIGH] Exposed, outdated nginx server (v1.4.6) potentially vulnerable to heap-based buffer overflow & RCE
Exposed, outdated nginx server (v1.4.6) potentially vulnerable to heap-based buffer overflow & RCE
Summary
During my reconnaissance for your bug bounty program, I discovered an instance of nginx version 1.4.6 running at the IP address https://54.153.101.52. To locate it, I search for IRCCloud-related certificated and found the self-signed certificate for this server (https://censys.io/ipv4/54.153.101.52). This version is in the range of nginx versions affected by the CVE, [CVE-2014-0133](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0133). There is a known exploit for this CVE. According to MITRE, this "heap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.5.x before 1.5.12 allows remote attackers to execute arbitrary code via a crafted request
HackerOne
SPDY heap buffer overflow
hackerone·2014-03-24·CVSS 7.5
CVE-2014-0133 [HIGH] SPDY heap buffer overflow
SPDY heap buffer overflow
A bug in the experimental SPDY implementation in nginx was found, which might allow an attacker to cause a heap memory buffer overflow in a worker process by using a specially crafted request, potentially resulting in arbitrary code execution (CVE-2014-0133).
The problem affects nginx 1.3.15 - 1.5.11, compiled with the ngx_http_spdy_module module (which is not compiled by default) and without --with-debug configure option, if the "spdy" option of the "listen" directive is used in a configuration file.
The problem is fixed in nginx 1.5.12, 1.4.7.
Patch for the problem can be found here:
http://nginx.org/download/patch.2014.spdy2.txt
Thanks to Lucas Molas, researcher at Programa STIC, Fundación Dr. Manuel Sadosky, Buenos Aires, Argentina.
Bugzilla
CVE-2014-0133 nginx: heap-based buffer overflow in SPDY implementation
bugzilla·2014-03-19·CVSS 7.5
CVE-2014-0133 [HIGH] CVE-2014-0133 nginx: heap-based buffer overflow in SPDY implementation
CVE-2014-0133 nginx: heap-based buffer overflow in SPDY implementation
The following security flaw in nginx was reported [1]:
""
A bug in the experimental SPDY implementation in nginx was found, which
might allow an attacker to cause a heap memory buffer overflow in a
worker process by using a specially crafted request, potentially
resulting in arbitrary code execution (CVE-2014-0133).
The problem affects nginx 1.3.15 - 1.5.11, compiled with the
ngx_http_spdy_module module (which is not compiled by default) and
without --with-debug configure option, if the "spdy" option of the
"listen" directive is used in a configuration file.
The problem is fixed in nginx 1.5.12, 1.4.7.
""
The version of nginx in EPEL 5 and 6 is too old to be affected.
The Fedora builds do use the "--with-debug" op
http://lists.opensuse.org/opensuse-updates/2014-03/msg00095.htmlhttp://mailman.nginx.org/pipermail/nginx-announce/2014/000135.htmlhttp://www.securityfocus.com/bid/66537http://lists.opensuse.org/opensuse-updates/2014-03/msg00095.htmlhttp://mailman.nginx.org/pipermail/nginx-announce/2014/000135.htmlhttp://www.securityfocus.com/bid/66537
2014-03-28
Published