Sun Microsystems, Inc. Information for VU#180065

Nginx ngx_http_parse_complex_uri() buffer underflow vulnerability

Status

Not Affected

Vendor Statement

Sun Products are not vulnerable, since nginx is not included in any supported Sun product offering. A vulnerable version of nginx is available as an unsupported component of WebStack project, which will be updated to fix this vulnerability.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Vendor References

None

Addendum

There are no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us email.