NGINX Unit before 1.7.1 might allow an attacker to cause a heap-based buffer overflow in the router process with a specially crafted request. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Buffer Overflow
Denial Of Service
Memory Corruption
Nginx
Nginx Unit
+1
NVD
CVSS 3.0
9.8
EPSS
2.9%