file-missing-nginx-bof-protection: Missing Nginx Buffer Overflow Protection

id: file-missing-nginx-bof-protection

info:
  name: Missing Nginx Buffer Overflow Protection
  author: pussycat0x
  severity: medium
  description: |
    Ensures that buffer overflow protection is properly configured in Nginx to prevent large request attacks.
  reference:
    - https://wiki.devsecopsguides.com/docs/checklists/nginx/
    - https://nginx.org/en/docs/http/ngx_http_proxy_module.html
  metadata:
    verified: true
  tags: nginx,file,audit,hardening

file:
  - extensions:
      - conf

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "http"
          - "events"
        condition: and

      - type: word
        words:
          - "proxy_buffer_size"
          - "proxy_buffers"
          - "proxy_busy_buffers_size"
        condition: and
        negative: true
# digest: 4a0a00473045022036b0373d4799a54a494ead2953d156482fa9ae4fed41994f52af845fe83cc5e4022100d513a233c8599f369882cdfcce51bdf7e2810016cb237fe8e194753f4e2cef54:922c64590222798bb761d5b6d8e72950