NGINX Unit before 1.7.1 might allow an attacker to cause a heap-based buffer overflow in the router process with a specially crafted request. This may result in a denial of service (router process crash) or possibly have unspecified other impact.
References
| Link | Resource |
|---|---|
| http://hg.nginx.org/unit/file/tip/CHANGES | Release Notes Vendor Advisory |
| http://mailman.nginx.org/pipermail/unit/2019-February/000113.html | Mailing List Vendor Advisory |
| http://unit.nginx.org/CHANGES.txt | Release Notes Vendor Advisory |
| http://www.securityfocus.com/bid/106956 | Third Party Advisory VDB Entry |
| http://hg.nginx.org/unit/file/tip/CHANGES | Release Notes Vendor Advisory |
| http://www.securityfocus.com/bid/106956 | Third Party Advisory VDB Entry |
| http://unit.nginx.org/CHANGES.txt | Release Notes Vendor Advisory |
| http://mailman.nginx.org/pipermail/unit/2019-February/000113.html | Mailing List Vendor Advisory |
Configurations
History
12 Aug 2025, 17:24
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/106956 - Third Party Advisory, VDB Entry | |
| References | () http://hg.nginx.org/unit/file/tip/CHANGES - Release Notes, Vendor Advisory | |
| References | () http://unit.nginx.org/CHANGES.txt - Release Notes, Vendor Advisory | |
| References | () http://mailman.nginx.org/pipermail/unit/2019-February/000113.html - Mailing List, Vendor Advisory | |
| CPE | cpe:2.3:a:f5:nginx unit:*:*:*:*:*:*:*:* | |
| First Time |
F5 nginx unit
F5 |
Information
Published : 2019-02-08 03:29
Updated : 2025-08-12 17:24
NVD link : CVE-2019-7401
Mitre link : CVE-2019-7401
JSON object : View
Products Affected
f5
- nginx unit
CWE
CWE-787
Out-of-bounds Write