A heap-based buffer overflow vulnerability in NGINX allows unauthenticated remote attackers to cause service disruption or unauthorized file operations.

The flaw exists within the ngx_http_dav_module when using specific configurations involving MOVE or COPY methods, prefix locations, and alias directives. This unauthenticated, remotely exploitable heap-based buffer overflow (CWE-122) can lead to worker process termination or unauthorized file path manipulation.

The vulnerability carries a CVSS score of 8.2, reflecting a High severity rating due to the potential for service denial and unauthorized file system interactions. Successful exploitation could lead to significant operational downtime for web services or the unintended exposure of files, potentially violating data integrity and availability requirements.

Immediate Action: Update NGINX Open Source or NGINX Plus instances to the patched versions specified in the vendor advisory (F5 Article K000160382).

Proactive Monitoring: Review web server access logs for anomalous requests utilizing the MOVE or COPY HTTP methods, particularly those targeting alias-mapped directories.

Compensating Controls: If patching is delayed, disable the DAV module or restrict the use of the MOVE and COPY methods via configuration directives to prevent the vulnerable code path from being triggered.

Public Exploit Available: Yes, multiple public proofs of concept exist on GitHub.

This vulnerability presents a high risk to web infrastructure due to the ease of triggering the overflow. Administrators must verify their NGINX configuration for the use of DAV methods and apply the provided vendor patches immediately to ensure system integrity and service availability.