Vulnerability CVE-2014-0133

Vulnerability Name:

CVE-2014-0133 (CCN-92301)

Assigned:

2013-12-03

Published:

2014-03-18

Updated:

2021-11-10

Summary:

Heap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.5.x before 1.5.12 allows remote attackers to execute arbitrary code via a crafted request.

CVSS v3 Severity:

7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
5.5 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
5.5 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

CWE-787

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2014-0133

Source: SUSE
Type: Mailing List, Third Party Advisory
openSUSE-SU-2014:0450

Source: CCN
Type: nginx Mailing List, Tue Mar 18 16:45:47 UTC 2014
nginx security advisory (CVE-2014-0133)

Source: MLIST
Type: Vendor Advisory
[nginx-announce] 20140318 nginx security advisory (CVE-2014-0133)

Source: CCN
Type: nginx Web site
nginx

Source: CCN
Type: IBM Security Bulletin 1672562
SmartCloud Provisioning - Oracle CPU October 2013 and January 2014, nginx Open Source

Source: BID
Type: Third Party Advisory, VDB Entry
66537

Source: CCN
Type: BID-66537
nginx SPDY Implementation Heap Based Buffer Overflow Vulnerability

Source: XF
Type: UNKNOWN
nginx-cve20140133-bo(92301)

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2014-0133

Vulnerable Configuration:

Configuration 1:

cpe:/a:f5:nginx:*:*:*:*:*:*:*:* (Version >= 1.3.15 and < 1.4.7)

OR cpe:/a:f5:nginx:*:*:*:*:*:*:*:* (Version >= 1.5.0 and <= 1.5.11)

OR cpe:/o:opensuse:opensuse:13.1:*:*:*:*:*:*:*

Configuration 2:

cpe:/o:opensuse:opensuse:13.1:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:nginx:nginx:1.4.0:*:*:*:*:*:*:*

OR cpe:/a:nginx:nginx:1.4.3:*:*:*:*:*:*:*

OR cpe:/a:nginx:nginx:1.5.6:*:*:*:*:*:*:*

OR cpe:/o:opensuse:opensuse:13.1:*:*:*:*:*:*:*

OR cpe:/a:nginx:nginx:1.5.10:*:*:*:*:*:*:*

OR cpe:/a:nginx:nginx:1.5.8:*:*:*:*:*:*:*

OR cpe:/a:nginx:nginx:1.5.9:*:*:*:*:*:*:*

OR cpe:/a:nginx:nginx:1.5.11:*:*:*:*:*:*:*

OR cpe:/a:nginx:nginx:1.5.0:*:*:*:*:*:*:*

OR cpe:/a:nginx:nginx:1.5.1:*:*:*:*:*:*:*

OR cpe:/a:nginx:nginx:1.5.2:*:*:*:*:*:*:*

OR cpe:/a:nginx:nginx:1.5.3:*:*:*:*:*:*:*

OR cpe:/a:nginx:nginx:1.5.4:*:*:*:*:*:*:*

OR cpe:/a:nginx:nginx:1.5.5:*:*:*:*:*:*:*

OR cpe:/a:nginx:nginx:1.5.7:*:*:*:*:*:*:*

OR cpe:/a:nginx:nginx:1.4.1:*:*:*:*:*:*:*

OR cpe:/a:nginx:nginx:1.4.2:*:*:*:*:*:*:*

OR cpe:/a:nginx:nginx:1.3.15:*:*:*:*:*:*:*

OR cpe:/a:nginx:nginx:1.3.16:*:*:*:*:*:*:*

AND

cpe:/a:ibm:smartcloud_provisioning:2.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:smartcloud_provisioning:2.1.0.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:smartcloud_provisioning:2.1.0.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:smartcloud_provisioning:2.1.0.3:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20140133	V	CVE-2014-0133	2022-06-30
oval:org.opensuse.security:def:1527	P	Security update for containerd, docker and runc (Important) (in QA)	2022-06-14
oval:org.opensuse.security:def:113030	P	nginx-1.11.4-2.5 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:106473	P	Security update for xorg-x11-server (Important)	2021-12-20
oval:org.opensuse.security:def:47855	P	perl-YAML-LibYAML-0.38-10.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47527	P	wpa_supplicant-2.2-14.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47987	P	cyrus-sasl-2.1.26-8.7.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47541	P	yast2-users-3.2.11-1.47 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48079	P	libXi6-1.7.4-18.6.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47662	P	libFLAC++6-1.3.0-11.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48227	P	libxml2-2-2.9.4-46.20.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47526	P	wget-1.14-20.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:1005	P	gssproxy-0.8.2-3.6.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:48652	P	xlockmore-5.43-5.30 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48441	P	gvim-7.4.326-2.14 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48683	P	libgio-fam-2.38.2-5.12 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48525	P	libmusicbrainz4-2.1.5-27.79 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48754	P	pulseaudio-module-bluetooth-5.0-2.7 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48587	P	p7zip-9.20.1-6.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:2083	P	nginx-1.14.0-1.14 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63172	P	nginx-1.14.0-1.14 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:49914	P	mercurial on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49968	P	nginx on GA media (Moderate)	2020-12-01
oval:com.ubuntu.precise:def:20140133000	V	CVE-2014-0133 on Ubuntu 12.04 LTS (precise) - medium.	2014-03-28

BACK