جزئیات آسیب‌پذیری
CVE-2026-27654
NGINX ngx_http_dav_module vulnerability
شرح رسمی (انگلیسی)
NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_dav_module module that might allow an attacker to trigger a buffer overflow to the NGINX worker process; this vulnerability may result in termination of the NGINX worker process or modification of source or destination file names outside the document root. This issue affects NGINX Open Source and NGINX Plus when the configuration file uses DAV module MOVE or COPY methods, prefix location (nonregular expression location configuration), and alias directives. The integrity impact is constrained because the NGINX worker process user has low privileges and does not have access to the entire system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 8.8بالا | 4.0 | CVEProject cvelistV5 (CNA) (f5) | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N |
| 8.2بالا | 3.1 | CVEProject cvelistV5 (CNA) (f5) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H |
| 8.2بالا | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| F5 | NGINX Open Source | 0.5.13 ≤ v < 1.28.3 | CVEProject cvelistV5 (CNA) |
| F5 | NGINX Open Source | 1.29.0 ≤ v < 1.29.7 | CVEProject cvelistV5 (CNA) |
| F5 | NGINX Plus | R32 ≤ v < R32 P5 | CVEProject cvelistV5 (CNA) |
| F5 | NGINX Plus | R33 ≤ v | CVEProject cvelistV5 (CNA) |
| F5 | NGINX Plus | R34 ≤ v | CVEProject cvelistV5 (CNA) |
| F5 | NGINX Plus | R35 ≤ v < R35 P2 | CVEProject cvelistV5 (CNA) |
| F5 | NGINX Plus | R36 ≤ v < R36 P3 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۱۹- https://my.f5.com/manage/s/article/K000160382 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2026-27654 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2450776 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27654.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:13634 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6906 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6907 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:15942 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:14836 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13839 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:15943 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:15945 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13680 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:15966 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6923 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:7002 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:7343 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8346 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10065 vendor-advisoryx_refsource_REDHAT
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۱/۰۴
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۴/۲۴
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- f5
پیش‌بینی بهره‌برداری (EPSS)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- جزئی
ضعف‌ها (CWE)
- CWE-122Heap-based Buffer Overflow
- CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')