Search for packages
Package details: pkg:deb/ubuntu/nginx@1.16.1-0ubuntu1
purl pkg:deb/ubuntu/nginx@1.16.1-0ubuntu1
Next non-vulnerable version 1.18.0-0ubuntu1.2
Latest non-vulnerable version 1.18.0-0ubuntu1.2
Risk 10.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-1m3e-krau-aaap
Aliases:
CVE-2019-20372
NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.
1.16.1-0ubuntu2.1
Affected by 1 other vulnerability.
VCID-xdng-3k7v-aaaj
Aliases:
CVE-2021-23017
1-byte memory overwrite in resolver
1.18.0-0ubuntu1.2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-t7tm-t2rh-aaah Excessive CPU usage in HTTP/2 with priority changes CVE-2019-9513
VCID-vkg1-2urs-aaap Excessive CPU usage in HTTP/2 with small window updates CVE-2019-9511

Date Actor Action Vulnerability Source VulnerableCode Version