Multiple NGINX Flaws Let Remote Attackers Crash Servers and Execute Malicious Code

F5 has disclosed three serious security flaws in NGINX Plus and NGINX Open Source that can let remote, unauthenticated attackers crash worker processes by sending crafted HTTP requests. In certain setups, the memory errors could also allow code execution, although F5 says that outcome requires Address Space Layout Randomization, known as ASLR, to... Weiterlesen: Multiple NGINX Flaws Let Remote Attackers Crash Servers and Execute M…