VulnerableCode Package Details - pkg:nginx/nginx@1.15.6

Search for packages

Package details: pkg:nginx/nginx@1.15.6

Essentials
History (85)

purl	pkg:nginx/nginx@1.15.6

Next non-vulnerable version	1.26.2
Latest non-vulnerable version	1.27.4
Risk	10.0

Vulnerabilities affecting this package (7)

Vulnerability	Summary	Fixed by
VCID-2gtf-635s-aaab Aliases: CVE-2022-41742	NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted audio or video file. The issue affects only NGINX products that are built with the module ngx_http_mp4_module, when the mp4 directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngx_http_mp4_module.	1.22.1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1.23.2 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-c9xc-nm4d-aaar Aliases: CVE-2024-7347	Buffer overread in the ngx_http_mp4_module	1.26.2 Affected by 0 other vulnerabilities. 1.27.1 Affected by 0 other vulnerabilities.
VCID-q6hd-xazy-aaaj Aliases: CVE-2022-41741	NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to corrupt NGINX worker memory, resulting in its termination or potential other impact using a specially crafted audio or video file. The issue affects only NGINX products that are built with the ngx_http_mp4_module, when the mp4 directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngx_http_mp4_module.	1.22.1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1.23.2 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-srtd-t3v1-aaag Aliases: CVE-2019-9516	Excessive memory usage in HTTP/2 with zero length headers	1.16.1 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.17.3 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-t7tm-t2rh-aaah Aliases: CVE-2019-9513	Excessive CPU usage in HTTP/2 with priority changes	1.16.1 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.17.3 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-vkg1-2urs-aaap Aliases: CVE-2019-9511	Excessive CPU usage in HTTP/2 with small window updates	1.16.1 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.17.3 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-xdng-3k7v-aaaj Aliases: CVE-2021-23017	1-byte memory overwrite in resolver	1.20.1 Affected by 3 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.21.0 Affected by 3 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (3)

Vulnerability	Summary	Aliases
VCID-2x69-4b6w-aaak	Excessive CPU usage in HTTP/2	CVE-2018-16844
VCID-gzny-ttqs-aaaf	Excessive memory usage in HTTP/2	CVE-2018-16843
VCID-vhnt-d662-aaaf	Memory disclosure in the ngx_http_mp4_module	CVE-2018-16845

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2025-06-20T16:26:27.685628+00:00	Nginx Importer	Affected by	VCID-c9xc-nm4d-aaar	https://nginx.org/en/security_advisories.html	36.1.3
2025-06-04T08:01:26.101616+00:00	Nginx Importer	Affected by	VCID-c9xc-nm4d-aaar	https://nginx.org/en/security_advisories.html	36.1.0
2025-06-02T21:53:17.332628+00:00	Nginx Importer	Affected by	VCID-c9xc-nm4d-aaar	https://nginx.org/en/security_advisories.html	36.1.2
2025-04-03T22:47:08.346737+00:00	Nginx Importer	Affected by	VCID-c9xc-nm4d-aaar	https://nginx.org/en/security_advisories.html	36.0.0
2025-03-28T16:29:47.185861+00:00	Nginx Importer	Fixing	VCID-vhnt-d662-aaaf	https://nginx.org/en/security_advisories.html	36.0.0
2025-03-28T16:29:47.042404+00:00	Nginx Importer	Fixing	VCID-2x69-4b6w-aaak	https://nginx.org/en/security_advisories.html	36.0.0
2025-03-28T16:29:46.925796+00:00	Nginx Importer	Fixing	VCID-gzny-ttqs-aaaf	https://nginx.org/en/security_advisories.html	36.0.0
2025-02-18T08:38:36.072145+00:00	Nginx Importer	Affected by	VCID-c9xc-nm4d-aaar	https://nginx.org/en/security_advisories.html	35.1.0
2025-01-16T23:01:18.666891+00:00	Nginx Importer	Fixing	VCID-vhnt-d662-aaaf	None	35.1.0
2025-01-16T23:01:18.601769+00:00	Nginx Importer	Fixing	VCID-2x69-4b6w-aaak	None	35.1.0
2025-01-16T23:01:18.559822+00:00	Nginx Importer	Fixing	VCID-gzny-ttqs-aaaf	None	35.1.0
2024-10-08T04:28:21.893742+00:00	Nginx Importer	Affected by	VCID-c9xc-nm4d-aaar	https://nginx.org/en/security_advisories.html	34.0.2
2024-10-08T04:28:04.366495+00:00	Nginx Importer	Affected by	VCID-2gtf-635s-aaab	https://nginx.org/en/security_advisories.html	34.0.2
2024-10-08T04:28:00.124260+00:00	Nginx Importer	Affected by	VCID-q6hd-xazy-aaaj	https://nginx.org/en/security_advisories.html	34.0.2
2024-10-08T04:27:54.496863+00:00	Nginx Importer	Affected by	VCID-xdng-3k7v-aaaj	https://nginx.org/en/security_advisories.html	34.0.2
2024-10-08T04:27:50.307301+00:00	Nginx Importer	Affected by	VCID-srtd-t3v1-aaag	https://nginx.org/en/security_advisories.html	34.0.2
2024-10-08T04:27:47.552267+00:00	Nginx Importer	Affected by	VCID-t7tm-t2rh-aaah	https://nginx.org/en/security_advisories.html	34.0.2
2024-10-08T04:27:44.427267+00:00	Nginx Importer	Affected by	VCID-vkg1-2urs-aaap	https://nginx.org/en/security_advisories.html	34.0.2
2024-10-08T04:27:41.935631+00:00	Nginx Importer	Fixing	VCID-vhnt-d662-aaaf	https://nginx.org/en/security_advisories.html	34.0.2
2024-10-08T04:27:38.243136+00:00	Nginx Importer	Fixing	VCID-2x69-4b6w-aaak	https://nginx.org/en/security_advisories.html	34.0.2
2024-10-08T04:27:35.463607+00:00	Nginx Importer	Fixing	VCID-gzny-ttqs-aaaf	https://nginx.org/en/security_advisories.html	34.0.2
2024-09-23T04:09:42.200962+00:00	Nginx Importer	Affected by	VCID-c9xc-nm4d-aaar	https://nginx.org/en/security_advisories.html	34.0.1
2024-09-23T04:09:24.873965+00:00	Nginx Importer	Affected by	VCID-2gtf-635s-aaab	https://nginx.org/en/security_advisories.html	34.0.1
2024-09-23T04:09:20.852824+00:00	Nginx Importer	Affected by	VCID-q6hd-xazy-aaaj	https://nginx.org/en/security_advisories.html	34.0.1
2024-09-23T04:09:16.175561+00:00	Nginx Importer	Affected by	VCID-xdng-3k7v-aaaj	https://nginx.org/en/security_advisories.html	34.0.1
2024-09-23T04:09:11.981685+00:00	Nginx Importer	Affected by	VCID-srtd-t3v1-aaag	https://nginx.org/en/security_advisories.html	34.0.1
2024-09-23T04:09:09.206499+00:00	Nginx Importer	Affected by	VCID-t7tm-t2rh-aaah	https://nginx.org/en/security_advisories.html	34.0.1
2024-09-23T04:09:06.382483+00:00	Nginx Importer	Affected by	VCID-vkg1-2urs-aaap	https://nginx.org/en/security_advisories.html	34.0.1
2024-09-17T22:48:22.774095+00:00	Nginx Importer	Fixing	VCID-vhnt-d662-aaaf	https://nginx.org/en/security_advisories.html	34.0.1
2024-09-17T22:48:22.712969+00:00	Nginx Importer	Fixing	VCID-2x69-4b6w-aaak	https://nginx.org/en/security_advisories.html	34.0.1
2024-09-17T22:48:22.665829+00:00	Nginx Importer	Fixing	VCID-gzny-ttqs-aaaf	https://nginx.org/en/security_advisories.html	34.0.1
2024-04-24T06:34:04.021711+00:00	Nginx Importer	Affected by	VCID-2gtf-635s-aaab	None	34.0.0rc4
2024-04-24T06:33:59.919232+00:00	Nginx Importer	Affected by	VCID-2gtf-635s-aaab	https://nginx.org/en/security_advisories.html	34.0.0rc4
2024-04-24T06:33:52.282257+00:00	Nginx Importer	Affected by	VCID-q6hd-xazy-aaaj	https://nginx.org/en/security_advisories.html	34.0.0rc4
2024-04-24T06:33:44.357623+00:00	Nginx Importer	Affected by	VCID-q6hd-xazy-aaaj	None	34.0.0rc4
2024-04-24T06:33:33.977462+00:00	Nginx Importer	Affected by	VCID-xdng-3k7v-aaaj	None	34.0.0rc4
2024-04-24T06:33:28.480996+00:00	Nginx Importer	Affected by	VCID-xdng-3k7v-aaaj	https://nginx.org/en/security_advisories.html	34.0.0rc4
2024-04-24T06:33:21.722767+00:00	Nginx Importer	Affected by	VCID-srtd-t3v1-aaag	None	34.0.0rc4
2024-04-24T06:33:19.108158+00:00	Nginx Importer	Affected by	VCID-srtd-t3v1-aaag	https://nginx.org/en/security_advisories.html	34.0.0rc4
2024-04-24T06:33:13.701743+00:00	Nginx Importer	Affected by	VCID-t7tm-t2rh-aaah	None	34.0.0rc4
2024-04-24T06:33:11.044013+00:00	Nginx Importer	Affected by	VCID-t7tm-t2rh-aaah	https://nginx.org/en/security_advisories.html	34.0.0rc4
2024-04-24T06:33:05.294156+00:00	Nginx Importer	Affected by	VCID-vkg1-2urs-aaap	https://nginx.org/en/security_advisories.html	34.0.0rc4
2024-04-24T06:33:02.450726+00:00	Nginx Importer	Affected by	VCID-vkg1-2urs-aaap	None	34.0.0rc4
2024-04-24T06:32:56.449893+00:00	Nginx Importer	Fixing	VCID-vhnt-d662-aaaf	https://nginx.org/en/security_advisories.html	34.0.0rc4
2024-04-24T06:32:52.742147+00:00	Nginx Importer	Fixing	VCID-vhnt-d662-aaaf	None	34.0.0rc4
2024-04-24T06:32:46.354784+00:00	Nginx Importer	Fixing	VCID-2x69-4b6w-aaak	https://nginx.org/en/security_advisories.html	34.0.0rc4
2024-04-24T06:32:43.582977+00:00	Nginx Importer	Fixing	VCID-2x69-4b6w-aaak	None	34.0.0rc4
2024-04-24T06:32:38.408127+00:00	Nginx Importer	Fixing	VCID-gzny-ttqs-aaaf	None	34.0.0rc4
2024-04-24T06:32:35.800780+00:00	Nginx Importer	Fixing	VCID-gzny-ttqs-aaaf	https://nginx.org/en/security_advisories.html	34.0.0rc4
2024-01-10T09:03:00.406772+00:00	Nginx Importer	Affected by	VCID-2gtf-635s-aaab	None	34.0.0rc2
2024-01-10T09:02:55.880808+00:00	Nginx Importer	Affected by	VCID-2gtf-635s-aaab	https://nginx.org/en/security_advisories.html	34.0.0rc2
2024-01-10T09:02:47.100434+00:00	Nginx Importer	Affected by	VCID-q6hd-xazy-aaaj	https://nginx.org/en/security_advisories.html	34.0.0rc2
2024-01-10T09:02:38.208202+00:00	Nginx Importer	Affected by	VCID-q6hd-xazy-aaaj	None	34.0.0rc2
2024-01-10T09:02:27.439273+00:00	Nginx Importer	Affected by	VCID-xdng-3k7v-aaaj	None	34.0.0rc2
2024-01-10T09:02:21.514975+00:00	Nginx Importer	Affected by	VCID-xdng-3k7v-aaaj	https://nginx.org/en/security_advisories.html	34.0.0rc2
2024-01-10T09:02:13.730071+00:00	Nginx Importer	Affected by	VCID-srtd-t3v1-aaag	None	34.0.0rc2
2024-01-10T09:02:10.550153+00:00	Nginx Importer	Affected by	VCID-srtd-t3v1-aaag	https://nginx.org/en/security_advisories.html	34.0.0rc2
2024-01-10T09:02:04.204050+00:00	Nginx Importer	Affected by	VCID-t7tm-t2rh-aaah	None	34.0.0rc2
2024-01-10T09:02:00.444483+00:00	Nginx Importer	Affected by	VCID-t7tm-t2rh-aaah	https://nginx.org/en/security_advisories.html	34.0.0rc2
2024-01-10T09:01:53.890002+00:00	Nginx Importer	Affected by	VCID-vkg1-2urs-aaap	https://nginx.org/en/security_advisories.html	34.0.0rc2
2024-01-10T09:01:50.606627+00:00	Nginx Importer	Affected by	VCID-vkg1-2urs-aaap	None	34.0.0rc2
2024-01-10T09:01:43.721531+00:00	Nginx Importer	Fixing	VCID-vhnt-d662-aaaf	https://nginx.org/en/security_advisories.html	34.0.0rc2
2024-01-10T09:01:39.610468+00:00	Nginx Importer	Fixing	VCID-vhnt-d662-aaaf	None	34.0.0rc2
2024-01-10T09:01:32.529585+00:00	Nginx Importer	Fixing	VCID-2x69-4b6w-aaak	https://nginx.org/en/security_advisories.html	34.0.0rc2
2024-01-10T09:01:29.345089+00:00	Nginx Importer	Fixing	VCID-2x69-4b6w-aaak	None	34.0.0rc2
2024-01-10T09:01:23.173412+00:00	Nginx Importer	Fixing	VCID-gzny-ttqs-aaaf	None	34.0.0rc2
2024-01-10T09:01:20.049280+00:00	Nginx Importer	Fixing	VCID-gzny-ttqs-aaaf	https://nginx.org/en/security_advisories.html	34.0.0rc2
2024-01-04T01:48:11.545786+00:00	Nginx Importer	Affected by	VCID-2gtf-635s-aaab	None	34.0.0rc1
2024-01-04T01:48:07.224216+00:00	Nginx Importer	Affected by	VCID-2gtf-635s-aaab	https://nginx.org/en/security_advisories.html	34.0.0rc1
2024-01-04T01:47:58.680014+00:00	Nginx Importer	Affected by	VCID-q6hd-xazy-aaaj	https://nginx.org/en/security_advisories.html	34.0.0rc1
2024-01-04T01:47:49.917380+00:00	Nginx Importer	Affected by	VCID-q6hd-xazy-aaaj	None	34.0.0rc1
2024-01-04T01:47:39.447331+00:00	Nginx Importer	Affected by	VCID-xdng-3k7v-aaaj	None	34.0.0rc1
2024-01-04T01:47:33.919455+00:00	Nginx Importer	Affected by	VCID-xdng-3k7v-aaaj	https://nginx.org/en/security_advisories.html	34.0.0rc1
2024-01-04T01:47:26.268502+00:00	Nginx Importer	Affected by	VCID-srtd-t3v1-aaag	None	34.0.0rc1
2024-01-04T01:47:23.022386+00:00	Nginx Importer	Affected by	VCID-srtd-t3v1-aaag	https://nginx.org/en/security_advisories.html	34.0.0rc1
2024-01-04T01:47:16.595430+00:00	Nginx Importer	Affected by	VCID-t7tm-t2rh-aaah	None	34.0.0rc1
2024-01-04T01:47:13.241946+00:00	Nginx Importer	Affected by	VCID-t7tm-t2rh-aaah	https://nginx.org/en/security_advisories.html	34.0.0rc1
2024-01-04T01:47:07.069794+00:00	Nginx Importer	Affected by	VCID-vkg1-2urs-aaap	https://nginx.org/en/security_advisories.html	34.0.0rc1
2024-01-04T01:47:03.831618+00:00	Nginx Importer	Affected by	VCID-vkg1-2urs-aaap	None	34.0.0rc1
2024-01-04T01:46:53.046156+00:00	Nginx Importer	Fixing	VCID-vhnt-d662-aaaf	None	34.0.0rc1
2024-01-04T01:46:42.608857+00:00	Nginx Importer	Fixing	VCID-2x69-4b6w-aaak	None	34.0.0rc1
2024-01-04T01:46:36.370859+00:00	Nginx Importer	Fixing	VCID-gzny-ttqs-aaaf	None	34.0.0rc1
2024-01-03T18:31:51.475842+00:00	Nginx Importer	Fixing	VCID-vhnt-d662-aaaf	https://nginx.org/en/security_advisories.html	34.0.0rc1
2024-01-03T18:31:51.408841+00:00	Nginx Importer	Fixing	VCID-2x69-4b6w-aaak	https://nginx.org/en/security_advisories.html	34.0.0rc1
2024-01-03T18:31:51.357040+00:00	Nginx Importer	Fixing	VCID-gzny-ttqs-aaaf	https://nginx.org/en/security_advisories.html	34.0.0rc1