CVE-2013-2028
The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows...
The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow.
Exploit likelihood
What each source reports
NVD Score used
The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow.
- Record
CVE-2013-2028- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-787
- Updated
- 2026-11-02
CVE List No score
The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow.
- Record
CVE-2013-2028- Updated
- 2026-11-02
EUVDEUVD-2013-2015 No score
The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow.
- Record
EUVD-2013-2015- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-68mc-8233-5xrw No score
The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows...
The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow.
- Record
GHSA-68mc-8233-5xrw- Weakness
- CWE-787
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Nginx 1.3.9 < 1.4.0 - Denial of Service (PoC) | 2013-05-17 |
| Exploit-DB | Nginx 1.3.9 < 1.4.0 - Chuncked Encoding Stack Buffer Overflow (Metasploit) | 2013-05-28 |
| Exploit-DB | Nginx 1.3.9/1.4.0 (x86) - Brute Force | 2013-07-11 |
| Exploit-DB | Nginx 1.4.0 (Generic Linux x64) - Remote Overflow | 2014-03-15 |
| Metasploit | Nginx HTTP Server 1.3.9-1.4.0 Chunked Encoding Stack Buffer Overflow | 2013-05-07 |
| PoC in GitHub | Sunqiz/CVE-2013-2028-reproduction | 2022-08-15 |
| PoC in GitHub | danghvu/nginx-1.4.0 | 2013-05-21 |
| PoC in GitHub | jptr218/nginxhack | 2021-07-08 |
| PoC in GitHub | kitctf/nginxpwn | 2016-03-23 |
| PoC in GitHub | m4drat/CVE-2013-2028-Exploit | 2020-06-27 |
| PoC in GitHub | tachibana51/CVE-2013-2028-x64-bypass-ssp-and-pie-PoC | 2019-08-03 |
| PoC in GitHub | vanivamshi/CVE-2013-2028-Exploit | 2026-09-12 |
| PoC in GitHub | xiw1ll/CVE-2013-2028_Checker | 2024-07-23 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-2028 is a high vulnerability (CVSS 7.5) in F5 Nginx, published July 18, 2013. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 87.5%, the 99th percentile. No source names a fixed version.
References
mailman.nginx.org/pipermail/nginx-announce/2013/000112.html
osvdb.org/93037
lists.fedoraproject.org/pipermail/package-announce/2013-May/105176.html
vnsecurity.net/2013/05/analysis-of-nginx-cve-2013-2028
secunia.com/advisories/55181
securityfocus.com/bid/59699