Debian Security Advisory 1884-1 – Chris Ries discovered that nginx, a high-performance HTTP server, reverse proxy and IMAP/POP3 proxy server, is vulnerable to a buffer underflow when processing certain HTTP requests. An attacker can use this to execute arbitrary code with the rights of the worker process (www-data on Debian) or possibly perform denial of service attacks by repeatedly crashing worker processes via a specially crafted URL in an HTTP request.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/81284/dsa-1884-1.txt
Source: https://packetstormsecurity.com/files/81284/Debian-Linux-Security-Advisory-1884-1.html