Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-7401

NGINX Unit before 1.7.1 might allow an attacker to cause a heap-based buffer overflow in the router process with a specially crafted request. This may result in a denial of service (router process crash) or possibly have unspecified other impact.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.025
EPSS Ranking 84.4%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2019-7401
  • Nginx » Unit » Version: 0.3
    cpe:2.3:a:nginx:unit:0.3
  • Nginx » Unit » Version: 0.4
    cpe:2.3:a:nginx:unit:0.4
  • Nginx » Unit » Version: 0.5
    cpe:2.3:a:nginx:unit:0.5
  • Nginx » Unit » Version: 0.6
    cpe:2.3:a:nginx:unit:0.6
  • Nginx » Unit » Version: 0.7
    cpe:2.3:a:nginx:unit:0.7
  • Nginx » Unit » Version: 1.0
    cpe:2.3:a:nginx:unit:1.0
  • Nginx » Unit » Version: 1.1
    cpe:2.3:a:nginx:unit:1.1
  • Nginx » Unit » Version: 1.2
    cpe:2.3:a:nginx:unit:1.2
  • Nginx » Unit » Version: 1.3
    cpe:2.3:a:nginx:unit:1.3
  • Nginx » Unit » Version: 1.4
    cpe:2.3:a:nginx:unit:1.4
  • Nginx » Unit » Version: 1.5
    cpe:2.3:a:nginx:unit:1.5
  • Nginx » Unit » Version: 1.6
    cpe:2.3:a:nginx:unit:1.6
  • Nginx » Unit » Version: 1.7
    cpe:2.3:a:nginx:unit:1.7


Contact Us

Shodan ® - All rights reserved