Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2014-0133

Heap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.5.x before 1.5.12 allows remote attackers to execute arbitrary code via a crafted request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.209
EPSS Ranking 95.3%
CVSS Severity
CVSS v2 Score 7.5
Products affected by CVE-2014-0133
  • F5 » Nginx » Version: 1.3.15
    cpe:2.3:a:f5:nginx:1.3.15
  • F5 » Nginx » Version: 1.3.16
    cpe:2.3:a:f5:nginx:1.3.16
  • F5 » Nginx » Version: 1.4.0
    cpe:2.3:a:f5:nginx:1.4.0
  • F5 » Nginx » Version: 1.4.1
    cpe:2.3:a:f5:nginx:1.4.1
  • F5 » Nginx » Version: 1.4.2
    cpe:2.3:a:f5:nginx:1.4.2
  • F5 » Nginx » Version: 1.4.3
    cpe:2.3:a:f5:nginx:1.4.3
  • F5 » Nginx » Version: 1.4.4
    cpe:2.3:a:f5:nginx:1.4.4
  • F5 » Nginx » Version: 1.4.5
    cpe:2.3:a:f5:nginx:1.4.5
  • F5 » Nginx » Version: 1.4.6
    cpe:2.3:a:f5:nginx:1.4.6
  • F5 » Nginx » Version: 1.5.0
    cpe:2.3:a:f5:nginx:1.5.0
  • F5 » Nginx » Version: 1.5.1
    cpe:2.3:a:f5:nginx:1.5.1
  • F5 » Nginx » Version: 1.5.10
    cpe:2.3:a:f5:nginx:1.5.10
  • F5 » Nginx » Version: 1.5.11
    cpe:2.3:a:f5:nginx:1.5.11
  • F5 » Nginx » Version: 1.5.2
    cpe:2.3:a:f5:nginx:1.5.2
  • F5 » Nginx » Version: 1.5.3
    cpe:2.3:a:f5:nginx:1.5.3
  • F5 » Nginx » Version: 1.5.4
    cpe:2.3:a:f5:nginx:1.5.4
  • F5 » Nginx » Version: 1.5.5
    cpe:2.3:a:f5:nginx:1.5.5
  • F5 » Nginx » Version: 1.5.6
    cpe:2.3:a:f5:nginx:1.5.6
  • F5 » Nginx » Version: 1.5.7
    cpe:2.3:a:f5:nginx:1.5.7
  • F5 » Nginx » Version: 1.5.8
    cpe:2.3:a:f5:nginx:1.5.8
  • F5 » Nginx » Version: 1.5.9
    cpe:2.3:a:f5:nginx:1.5.9
  • Opensuse » Opensuse » Version: 13.1
    cpe:2.3:o:opensuse:opensuse:13.1


Contact Us

Shodan ® - All rights reserved