Integer overflow in ngx_http_close_connection

Server NGINX
1

Cfr. http://www.securityfocus.com/archive/1/526439/30/0/threaded

Is 1.4.x release affected?

Thanks,
d.

2

Hi!

Cfr. http://www.securityfocus.com/archive/1/526439/30/0/threaded

Is 1.4.x release affected?

I guess. Please see the “recent nginx security issue announce” thread.

Cheers,
Lukas

3

On Apr 26, 2013, at 4:12 PM, Lukas T. wrote:

Hi!

Cfr. http://www.securityfocus.com/archive/1/526439/30/0/threaded

Is 1.4.x release affected?

I guess. Please see the “recent nginx security issue announce‏” thread.

We are still investigating. So far we can’t confirm it’s a full
disclosure.