# Integer overflow in ngx\_http\_close\_connection

**URL:** <https://www.ruby-forum.com/t/integer-overflow-in-ngx-http-close-connection/228536>\
**Category:** NGINX\
**Created:** [April 26, 2013, 2:04pm UTC](https://www.ruby-forum.com/t/integer-overflow-in-ngx-http-close-connection/228536 "2013-04-26T14:04:38Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Davide\_DSAmico](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/eb9ed0/32.png) [@Davide\_DSAmico](https://www.ruby-forum.com/u/Davide_DSAmico)\
**Post date:** [April 26, 2013, 2:04pm UTC](https://www.ruby-forum.com/t/integer-overflow-in-ngx-http-close-connection/228536/1 "2013-04-26T14:04:38Z")

</div>

Cfr. [http://www.securityfocus.com/archive/1/526439/30/0/threaded](http://www.securityfocus.com/archive/1/526439/30/0/threaded)

Is 1.4.x release affected?

Thanks,  
d.

---

<div class="post-metadata">

**Author:** ![Davide\_DSAmico](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/eb9ed0/32.png) [@Davide\_DSAmico](https://www.ruby-forum.com/u/Davide_DSAmico)\
**Post date:** [April 26, 2013, 2:13pm UTC](https://www.ruby-forum.com/t/integer-overflow-in-ngx-http-close-connection/228536/2 "2013-04-26T14:13:24Z")

</div>

Hi!

> Cfr. [SecurityFocus](http://www.securityfocus.com/archive/1/526439/30/0/threaded)
> 
> Is 1.4.x release affected?

I guess. Please see the “recent nginx security issue announce” thread.

Cheers,  
Lukas

---

<div class="post-metadata">

**Author:** ![Davide\_DSAmico](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/eb9ed0/32.png) [@Davide\_DSAmico](https://www.ruby-forum.com/u/Davide_DSAmico)\
**Post date:** [April 26, 2013, 2:15pm UTC](https://www.ruby-forum.com/t/integer-overflow-in-ngx-http-close-connection/228536/3 "2013-04-26T14:15:45Z")

</div>

On Apr 26, 2013, at 4:12 PM, Lukas T. wrote:

> Hi!
> 
> > Cfr. [SecurityFocus](http://www.securityfocus.com/archive/1/526439/30/0/threaded)
> > 
> > Is 1.4.x release affected?
> 
> I guess. Please see the “recent nginx security issue announce‏” thread.

We are still investigating. So far we can’t confirm it’s a full  
disclosure.