VulnerableCode Package Details - pkg:deb/ubuntu/nginx@1.15.5-0ubuntu1

Search for packages

Package details: pkg:deb/ubuntu/nginx@1.15.5-0ubuntu1

Essentials
History (0)

purl	pkg:deb/ubuntu/nginx@1.15.5-0ubuntu1

Next non-vulnerable version	1.18.0-0ubuntu1.2
Latest non-vulnerable version	1.18.0-0ubuntu1.2
Risk	10.0

Vulnerabilities affecting this package (4)

Vulnerability	Summary	Fixed by
VCID-1m3e-krau-aaap Aliases: CVE-2019-20372	NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.	1.16.1-0ubuntu2.1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-t7tm-t2rh-aaah Aliases: CVE-2019-9513	Excessive CPU usage in HTTP/2 with priority changes	1.16.1-0ubuntu1 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-vkg1-2urs-aaap Aliases: CVE-2019-9511	Excessive CPU usage in HTTP/2 with small window updates	1.16.1-0ubuntu1 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-xdng-3k7v-aaaj Aliases: CVE-2021-23017	1-byte memory overwrite in resolver	1.18.0-0ubuntu1.2 Affected by 0 other vulnerabilities.

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version