atom feed9 messages in ru.sysoev.nginxRe: Is nginx vulnerable to the Hash T...
FromSent OnAttachments
Justin HartDec 31, 2011 10:37 am 
Maxim DouninDec 31, 2011 4:34 pm 
agentzhDec 31, 2011 9:53 pm 
Justin HartDec 31, 2011 9:58 pm 
agentzhJan 1, 2012 6:20 am 
Nginx UserJan 1, 2012 6:31 am 
Sergey A. OsokinJan 1, 2012 10:37 am 
agentzhJan 4, 2012 3:47 am 
Nginx UserJan 4, 2012 12:01 pm 
Subject:Re: Is nginx vulnerable to the Hash Table Vulnerability (n.runs AG)?
From:Maxim Dounin (mdou@mdounin.ru)
Date:Dec 31, 2011 4:34:18 pm
List:ru.sysoev.nginx

Hello!

On Sat, Dec 31, 2011 at 11:37:39AM -0700, Justin Hart wrote:

http://www.securityweek.com/hash-table-collision-attacks-could-trigger-ddos-massive-scale

Without going through the way nginx parses an incoming request, I'm unsure if nginx isn't vulnerable to this, because of the availability to grab the value of a GET parameter via http://wiki.nginx.org/HttpCoreModule#.24arg_PARAMETER. My hope is that especially if an $arg_PARAMETER isn't used in the config, it is not vulnerable because it wouldn't even attempt to parse the parameters, but I can't be sure.

Can anyone speak to this?

It's not vulnerable even if $arg_* is used.

Maxim Dounin

_______________________________________________ nginx mailing list ngi@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx