Search for packages
Package details: pkg:deb/debian/nginx@1.2.1-2.2%2Bwheezy4
purl pkg:deb/debian/nginx@1.2.1-2.2%2Bwheezy4
Next non-vulnerable version 1.26.3-3
Latest non-vulnerable version 1.26.3-3
Risk 10.0
Vulnerabilities affecting this package (30)
Vulnerability Summary Fixed by
VCID-3d3j-83ap-jua7
Aliases:
CVE-2021-3618
ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
1.18.0-6.1+deb11u3
Affected by 5 other vulnerabilities.
VCID-46bw-8rjq-h7a2
Aliases:
CVE-2011-4968
nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM)
1.10.3-1+deb9u1~bpo8+2
Affected by 18 other vulnerabilities.
VCID-4ppq-r7dp-tfbh
Aliases:
CVE-2014-0133
SPDY heap buffer overflow
1.6.2-5
Affected by 25 other vulnerabilities.
VCID-66m3-refr-quf4
Aliases:
CVE-2024-7347
Buffer overread in the ngx_http_mp4_module
1.22.1-9+deb12u2
Affected by 1 other vulnerability.
VCID-81pb-4hqw-g3cs
Aliases:
CVE-2019-20372
NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.
1.18.0-6.1+deb11u3
Affected by 5 other vulnerabilities.
VCID-8tep-qhty-5fbp
Aliases:
CVE-2014-3556
STARTTLS command injection
1.6.2-5
Affected by 25 other vulnerabilities.
VCID-9nfh-cgh8-ykam
Aliases:
CVE-2019-9511
Excessive CPU usage in HTTP/2 with small window updates
1.10.3-1+deb9u4
Affected by 18 other vulnerabilities.
1.14.2-2+deb10u4
Affected by 13 other vulnerabilities.
1.18.0-6.1+deb11u3
Affected by 5 other vulnerabilities.
VCID-a6gf-uc1d-9ff7
Aliases:
CVE-2016-0746
Use-after-free during CNAME response processing in resolver
1.6.2-5+deb8u2~bpo70+1
Affected by 25 other vulnerabilities.
1.10.3-1+deb9u1~bpo8+2
Affected by 18 other vulnerabilities.
VCID-ac74-v1hs-27bq
Aliases:
CVE-2013-2070
Memory disclosure with specially crafted HTTP backend responses
1.6.2-5
Affected by 25 other vulnerabilities.
VCID-apkw-1xhe-rua1
Aliases:
CVE-2022-41741
Memory corruption in the ngx_http_mp4_module
1.18.0-6.1+deb11u3
Affected by 5 other vulnerabilities.
VCID-cjeh-2x36-ffc5
Aliases:
CVE-2016-0747
Insufficient limits of CNAME resolution in resolver
1.6.2-5+deb8u2~bpo70+1
Affected by 25 other vulnerabilities.
1.10.3-1+deb9u1~bpo8+2
Affected by 18 other vulnerabilities.
VCID-eanb-jznh-w3f1
Aliases:
CVE-2019-9516
Excessive memory usage in HTTP/2 with zero length headers
1.10.3-1+deb9u4
Affected by 18 other vulnerabilities.
1.14.2-2+deb10u4
Affected by 13 other vulnerabilities.
1.18.0-6.1+deb11u3
Affected by 5 other vulnerabilities.
VCID-etdd-rrau-fbc2
Aliases:
CVE-2016-0742
Invalid pointer dereference in resolver
1.6.2-5+deb8u2~bpo70+1
Affected by 25 other vulnerabilities.
1.10.3-1+deb9u1~bpo8+2
Affected by 18 other vulnerabilities.
VCID-g1m9-xe6h-6qbp
Aliases:
CVE-2017-7529
Integer overflow in the range filter
1.6.2-5+deb8u5
Affected by 24 other vulnerabilities.
1.10.3-1+deb9u4
Affected by 18 other vulnerabilities.
1.14.2-2+deb10u4
Affected by 13 other vulnerabilities.
VCID-gry7-k163-w7ej
Aliases:
DSA-3701-2 nginx
regression update
1.6.2-5+deb8u5
Affected by 24 other vulnerabilities.
VCID-gxt7-8fgz-mbd8
Aliases:
CVE-2016-1247
1.6.2-5+deb8u5
Affected by 24 other vulnerabilities.
1.10.3-1+deb9u1~bpo8+2
Affected by 18 other vulnerabilities.
VCID-jpnw-4r81-93c2
Aliases:
CVE-2025-23419
SSL session reuse vulnerability
1.22.1-9+deb12u2
Affected by 1 other vulnerability.
VCID-kzjx-fr13-3udr
Aliases:
CVE-2016-4450
NULL pointer dereference while writing client request body
1.6.2-5+deb8u5
Affected by 24 other vulnerabilities.
1.10.3-1+deb9u1~bpo8+2
Affected by 18 other vulnerabilities.
VCID-mz5w-g94t-6yg1
Aliases:
CVE-2018-16845
Memory disclosure in the ngx_http_mp4_module
1.10.3-1+deb9u4
Affected by 18 other vulnerabilities.
1.14.2-2+deb10u4
Affected by 13 other vulnerabilities.
VCID-nkk1-gq2z-qfec
Aliases:
CVE-2018-16844
Excessive CPU usage in HTTP/2
1.10.3-1+deb9u4
Affected by 18 other vulnerabilities.
1.14.2-2+deb10u4
Affected by 13 other vulnerabilities.
VCID-pwx1-ppph-mkgm
Aliases:
CVE-2020-11724
An issue was discovered in OpenResty before 1.15.8.4. ngx_http_lua_subrequest.c allows HTTP request smuggling, as demonstrated by the ngx.location.capture API.
1.14.2-2+deb10u4
Affected by 13 other vulnerabilities.
1.18.0-6.1+deb11u3
Affected by 5 other vulnerabilities.
VCID-qeft-42gz-2bbq
Aliases:
CVE-2020-36309
ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header.
1.22.1-9+deb12u2
Affected by 1 other vulnerability.
VCID-u66f-7wzm-nbdp
Aliases:
CVE-2013-4547
Request line parsing vulnerability
1.6.2-5
Affected by 25 other vulnerabilities.
VCID-vfxh-kpsr-1kh7
Aliases:
CVE-2024-33452
An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request.
1.22.1-9+deb12u2
Affected by 1 other vulnerability.
VCID-wvtc-3qza-afgh
Aliases:
CVE-2019-9513
Excessive CPU usage in HTTP/2 with priority changes
1.10.3-1+deb9u4
Affected by 18 other vulnerabilities.
1.14.2-2+deb10u4
Affected by 13 other vulnerabilities.
1.18.0-6.1+deb11u3
Affected by 5 other vulnerabilities.
VCID-x119-ap36-fud1
Aliases:
CVE-2014-3616
SSL session reuse vulnerability
1.6.2-5
Affected by 25 other vulnerabilities.
VCID-yh1c-vsk2-abej
Aliases:
CVE-2017-20005
NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modification date in 1969 that causes an integer overflow (or a false modification date far in the future), when encountered by the autoindex module.
1.14.2-2+deb10u4
Affected by 13 other vulnerabilities.
VCID-yrau-18r6-4yhw
Aliases:
CVE-2018-16843
Excessive memory usage in HTTP/2
1.10.3-1+deb9u4
Affected by 18 other vulnerabilities.
1.14.2-2+deb10u4
Affected by 13 other vulnerabilities.
VCID-yrdf-1ka4-d7ff
Aliases:
CVE-2021-23017
1-byte memory overwrite in resolver
1.14.2-2+deb10u4
Affected by 13 other vulnerabilities.
1.18.0-6.1+deb11u3
Affected by 5 other vulnerabilities.
VCID-ysea-ax3y-8uce
Aliases:
CVE-2022-41742
Memory disclosure in the ngx_http_mp4_module
1.18.0-6.1+deb11u3
Affected by 5 other vulnerabilities.
Vulnerabilities fixed by this package (11)
Vulnerability Summary Aliases
VCID-9wxv-prk9-53he CVE-2012-4929
VCID-a6gf-uc1d-9ff7 Use-after-free during CNAME response processing in resolver CVE-2016-0746
VCID-ac74-v1hs-27bq Memory disclosure with specially crafted HTTP backend responses CVE-2013-2070
VCID-bvk8-3444-5fev Memory disclosure with specially crafted backend responses CVE-2012-1180
VCID-cjeh-2x36-ffc5 Insufficient limits of CNAME resolution in resolver CVE-2016-0747
VCID-ds13-tr1a-cbh5 Buffer overflow in the ngx_http_mp4_module CVE-2012-2089
VCID-etdd-rrau-fbc2 Invalid pointer dereference in resolver CVE-2016-0742
VCID-u24x-tq9m-6ke1 CVE-2012-3380
VCID-u66f-7wzm-nbdp Request line parsing vulnerability CVE-2013-4547
VCID-w2r6-grxr-d7dm Buffer overflow in resolver CVE-2011-4315
VCID-x119-ap36-fud1 SSL session reuse vulnerability CVE-2014-3616

Date Actor Action Vulnerability Source VulnerableCode Version
2025-08-01T20:06:52.271189+00:00 Debian Oval Importer Affected by VCID-g1m9-xe6h-6qbp https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T20:06:37.138875+00:00 Debian Oval Importer Fixing VCID-u24x-tq9m-6ke1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T20:05:42.826287+00:00 Debian Oval Importer Fixing VCID-bvk8-3444-5fev https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T19:58:09.430675+00:00 Debian Oval Importer Affected by VCID-9nfh-cgh8-ykam https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T19:32:33.015033+00:00 Debian Oval Importer Affected by VCID-u66f-7wzm-nbdp https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T19:07:57.111039+00:00 Debian Oval Importer Affected by VCID-81pb-4hqw-g3cs https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T19:04:13.136955+00:00 Debian Oval Importer Affected by VCID-cjeh-2x36-ffc5 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:26:14.426206+00:00 Debian Oval Importer Affected by VCID-gxt7-8fgz-mbd8 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:16:16.461582+00:00 Debian Oval Importer Affected by VCID-pwx1-ppph-mkgm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:08:26.592026+00:00 Debian Oval Importer Affected by VCID-a6gf-uc1d-9ff7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T16:17:44.191293+00:00 Debian Oval Importer Affected by VCID-vfxh-kpsr-1kh7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T16:05:49.392600+00:00 Debian Oval Importer Affected by VCID-x119-ap36-fud1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T15:53:22.857735+00:00 Debian Oval Importer Affected by VCID-3d3j-83ap-jua7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T15:42:11.724041+00:00 Debian Oval Importer Affected by VCID-4ppq-r7dp-tfbh https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T15:40:25.505458+00:00 Debian Oval Importer Affected by VCID-etdd-rrau-fbc2 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T15:26:09.726775+00:00 Debian Oval Importer Affected by VCID-apkw-1xhe-rua1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T15:22:13.127904+00:00 Debian Oval Importer Affected by VCID-yrau-18r6-4yhw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T15:21:23.916765+00:00 Debian Oval Importer Affected by VCID-nkk1-gq2z-qfec https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T15:09:21.807610+00:00 Debian Oval Importer Affected by VCID-yrdf-1ka4-d7ff https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T14:43:17.190263+00:00 Debian Oval Importer Affected by VCID-kzjx-fr13-3udr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T14:31:17.446927+00:00 Debian Oval Importer Fixing VCID-w2r6-grxr-d7dm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T14:22:45.622385+00:00 Debian Oval Importer Affected by VCID-ysea-ax3y-8uce https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T14:05:39.342202+00:00 Debian Oval Importer Affected by VCID-wvtc-3qza-afgh https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:55:57.016502+00:00 Debian Oval Importer Affected by VCID-66m3-refr-quf4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:52:46.826875+00:00 Debian Oval Importer Affected by VCID-eanb-jznh-w3f1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:49:20.492637+00:00 Debian Oval Importer Fixing VCID-ds13-tr1a-cbh5 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:41:01.117601+00:00 Debian Oval Importer Affected by VCID-jpnw-4r81-93c2 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:27:02.462875+00:00 Debian Oval Importer Affected by VCID-mz5w-g94t-6yg1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:19:54.788765+00:00 Debian Oval Importer Affected by VCID-qeft-42gz-2bbq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:01:03.906427+00:00 Debian Oval Importer Affected by VCID-ac74-v1hs-27bq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T12:48:48.699321+00:00 Debian Oval Importer Affected by VCID-46bw-8rjq-h7a2 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T12:15:39.492352+00:00 Debian Oval Importer Affected by VCID-8tep-qhty-5fbp https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T12:14:36.276786+00:00 Debian Oval Importer Fixing VCID-9wxv-prk9-53he https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T12:12:11.041250+00:00 Debian Oval Importer Affected by VCID-yh1c-vsk2-abej https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T11:44:36.495476+00:00 Debian Oval Importer Affected by VCID-yrdf-1ka4-d7ff https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 37.0.0
2025-08-01T11:43:11.424636+00:00 Debian Oval Importer Affected by VCID-wvtc-3qza-afgh https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 37.0.0
2025-08-01T11:31:02.899657+00:00 Debian Oval Importer Affected by VCID-9nfh-cgh8-ykam https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 37.0.0
2025-08-01T11:19:11.451802+00:00 Debian Oval Importer Affected by VCID-eanb-jznh-w3f1 https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 37.0.0
2025-08-01T11:14:54.065864+00:00 Debian Oval Importer Affected by VCID-pwx1-ppph-mkgm https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 37.0.0
2025-08-01T10:54:12.720291+00:00 Debian Oval Importer Affected by VCID-g1m9-xe6h-6qbp https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 37.0.0
2025-08-01T10:52:14.209012+00:00 Debian Oval Importer Affected by VCID-eanb-jznh-w3f1 https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 37.0.0
2025-08-01T10:52:06.029100+00:00 Debian Oval Importer Affected by VCID-mz5w-g94t-6yg1 https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 37.0.0
2025-08-01T10:48:44.581727+00:00 Debian Oval Importer Affected by VCID-9nfh-cgh8-ykam https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 37.0.0
2025-08-01T10:43:25.662564+00:00 Debian Oval Importer Affected by VCID-yrau-18r6-4yhw https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 37.0.0
2025-08-01T10:38:11.367790+00:00 Debian Oval Importer Affected by VCID-nkk1-gq2z-qfec https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 37.0.0
2025-08-01T10:36:53.406055+00:00 Debian Oval Importer Affected by VCID-wvtc-3qza-afgh https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 37.0.0
2025-08-01T10:25:59.197019+00:00 Debian Oval Importer Affected by VCID-gxt7-8fgz-mbd8 https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 37.0.0
2025-08-01T10:23:13.984476+00:00 Debian Oval Importer Affected by VCID-a6gf-uc1d-9ff7 https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 37.0.0
2025-08-01T10:22:09.135822+00:00 Debian Oval Importer Affected by VCID-g1m9-xe6h-6qbp https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 37.0.0
2025-08-01T10:14:43.366021+00:00 Debian Oval Importer Affected by VCID-kzjx-fr13-3udr https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 37.0.0
2025-08-01T10:12:22.364089+00:00 Debian Oval Importer Affected by VCID-cjeh-2x36-ffc5 https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 37.0.0
2025-08-01T10:11:19.390049+00:00 Debian Oval Importer Affected by VCID-gry7-k163-w7ej https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 37.0.0
2025-08-01T09:56:16.347809+00:00 Debian Oval Importer Affected by VCID-etdd-rrau-fbc2 https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 37.0.0
2025-08-01T09:44:13.332737+00:00 Debian Oval Importer Fixing VCID-etdd-rrau-fbc2 https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:42:06.924447+00:00 Debian Oval Importer Fixing VCID-x119-ap36-fud1 https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:39:12.328338+00:00 Debian Oval Importer Fixing VCID-ac74-v1hs-27bq https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:37:35.060456+00:00 Debian Oval Importer Fixing VCID-cjeh-2x36-ffc5 https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:32:07.464876+00:00 Debian Oval Importer Fixing VCID-u66f-7wzm-nbdp https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:25:52.731936+00:00 Debian Oval Importer Fixing VCID-a6gf-uc1d-9ff7 https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0