VulnerableCode Package Details - pkg:nginx/nginx@1.13.1

Search for packages

Package details: pkg:nginx/nginx@1.13.1

Essentials
History (87)

purl	pkg:nginx/nginx@1.13.1

Next non-vulnerable version	1.26.2
Latest non-vulnerable version	1.27.4
Risk	10.0

Vulnerabilities affecting this package (11)

Vulnerability	Summary	Fixed by
VCID-2gtf-635s-aaab Aliases: CVE-2022-41742	NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted audio or video file. The issue affects only NGINX products that are built with the module ngx_http_mp4_module, when the mp4 directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngx_http_mp4_module.	1.22.1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1.23.2 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-2x69-4b6w-aaak Aliases: CVE-2018-16844	Excessive CPU usage in HTTP/2	1.14.1 Affected by 7 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.15.6 Affected by 7 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-5w8z-sn91-aaaf Aliases: CVE-2017-7529	Integer overflow in the range filter	1.13.3 Affected by 10 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-c9xc-nm4d-aaar Aliases: CVE-2024-7347	Buffer overread in the ngx_http_mp4_module	1.26.2 Affected by 0 other vulnerabilities. 1.27.1 Affected by 0 other vulnerabilities.
VCID-gzny-ttqs-aaaf Aliases: CVE-2018-16843	Excessive memory usage in HTTP/2	1.14.1 Affected by 7 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.15.6 Affected by 7 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-q6hd-xazy-aaaj Aliases: CVE-2022-41741	NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to corrupt NGINX worker memory, resulting in its termination or potential other impact using a specially crafted audio or video file. The issue affects only NGINX products that are built with the ngx_http_mp4_module, when the mp4 directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngx_http_mp4_module.	1.22.1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1.23.2 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-srtd-t3v1-aaag Aliases: CVE-2019-9516	Excessive memory usage in HTTP/2 with zero length headers	1.16.1 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.17.3 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-t7tm-t2rh-aaah Aliases: CVE-2019-9513	Excessive CPU usage in HTTP/2 with priority changes	1.16.1 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.17.3 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-vhnt-d662-aaaf Aliases: CVE-2018-16845	Memory disclosure in the ngx_http_mp4_module	1.14.1 Affected by 7 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.15.6 Affected by 7 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-vkg1-2urs-aaap Aliases: CVE-2019-9511	Excessive CPU usage in HTTP/2 with small window updates	1.16.1 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.17.3 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-xdng-3k7v-aaaj Aliases: CVE-2021-23017	1-byte memory overwrite in resolver	1.20.1 Affected by 3 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.21.0 Affected by 3 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2025-06-20T16:26:27.647088+00:00	Nginx Importer	Affected by	VCID-c9xc-nm4d-aaar	https://nginx.org/en/security_advisories.html	36.1.3
2025-06-04T08:01:26.069581+00:00	Nginx Importer	Affected by	VCID-c9xc-nm4d-aaar	https://nginx.org/en/security_advisories.html	36.1.0
2025-06-02T21:53:17.292641+00:00	Nginx Importer	Affected by	VCID-c9xc-nm4d-aaar	https://nginx.org/en/security_advisories.html	36.1.2
2025-04-03T22:47:08.241664+00:00	Nginx Importer	Affected by	VCID-c9xc-nm4d-aaar	https://nginx.org/en/security_advisories.html	36.0.0
2025-02-18T08:38:35.969149+00:00	Nginx Importer	Affected by	VCID-c9xc-nm4d-aaar	https://nginx.org/en/security_advisories.html	35.1.0
2024-10-08T04:28:21.782869+00:00	Nginx Importer	Affected by	VCID-c9xc-nm4d-aaar	https://nginx.org/en/security_advisories.html	34.0.2
2024-10-08T04:28:04.265018+00:00	Nginx Importer	Affected by	VCID-2gtf-635s-aaab	https://nginx.org/en/security_advisories.html	34.0.2
2024-10-08T04:28:00.022792+00:00	Nginx Importer	Affected by	VCID-q6hd-xazy-aaaj	https://nginx.org/en/security_advisories.html	34.0.2
2024-10-08T04:27:54.395247+00:00	Nginx Importer	Affected by	VCID-xdng-3k7v-aaaj	https://nginx.org/en/security_advisories.html	34.0.2
2024-10-08T04:27:50.206090+00:00	Nginx Importer	Affected by	VCID-srtd-t3v1-aaag	https://nginx.org/en/security_advisories.html	34.0.2
2024-10-08T04:27:47.450821+00:00	Nginx Importer	Affected by	VCID-t7tm-t2rh-aaah	https://nginx.org/en/security_advisories.html	34.0.2
2024-10-08T04:27:44.325863+00:00	Nginx Importer	Affected by	VCID-vkg1-2urs-aaap	https://nginx.org/en/security_advisories.html	34.0.2
2024-10-08T04:27:41.216189+00:00	Nginx Importer	Affected by	VCID-vhnt-d662-aaaf	https://nginx.org/en/security_advisories.html	34.0.2
2024-10-08T04:27:37.928251+00:00	Nginx Importer	Affected by	VCID-2x69-4b6w-aaak	https://nginx.org/en/security_advisories.html	34.0.2
2024-10-08T04:27:35.147527+00:00	Nginx Importer	Affected by	VCID-gzny-ttqs-aaaf	https://nginx.org/en/security_advisories.html	34.0.2
2024-10-08T04:27:31.400447+00:00	Nginx Importer	Affected by	VCID-5w8z-sn91-aaaf	https://nginx.org/en/security_advisories.html	34.0.2
2024-09-23T04:09:42.087919+00:00	Nginx Importer	Affected by	VCID-c9xc-nm4d-aaar	https://nginx.org/en/security_advisories.html	34.0.1
2024-09-23T04:09:24.773107+00:00	Nginx Importer	Affected by	VCID-2gtf-635s-aaab	https://nginx.org/en/security_advisories.html	34.0.1
2024-09-23T04:09:20.752301+00:00	Nginx Importer	Affected by	VCID-q6hd-xazy-aaaj	https://nginx.org/en/security_advisories.html	34.0.1
2024-09-23T04:09:16.074379+00:00	Nginx Importer	Affected by	VCID-xdng-3k7v-aaaj	https://nginx.org/en/security_advisories.html	34.0.1
2024-09-23T04:09:11.880928+00:00	Nginx Importer	Affected by	VCID-srtd-t3v1-aaag	https://nginx.org/en/security_advisories.html	34.0.1
2024-09-23T04:09:09.105273+00:00	Nginx Importer	Affected by	VCID-t7tm-t2rh-aaah	https://nginx.org/en/security_advisories.html	34.0.1
2024-09-23T04:09:06.292214+00:00	Nginx Importer	Affected by	VCID-vkg1-2urs-aaap	https://nginx.org/en/security_advisories.html	34.0.1
2024-09-23T04:09:03.214545+00:00	Nginx Importer	Affected by	VCID-vhnt-d662-aaaf	https://nginx.org/en/security_advisories.html	34.0.1
2024-09-23T04:09:00.100923+00:00	Nginx Importer	Affected by	VCID-2x69-4b6w-aaak	https://nginx.org/en/security_advisories.html	34.0.1
2024-09-23T04:08:57.605750+00:00	Nginx Importer	Affected by	VCID-gzny-ttqs-aaaf	https://nginx.org/en/security_advisories.html	34.0.1
2024-09-23T04:08:53.792873+00:00	Nginx Importer	Affected by	VCID-5w8z-sn91-aaaf	https://nginx.org/en/security_advisories.html	34.0.1
2024-04-24T06:34:03.922915+00:00	Nginx Importer	Affected by	VCID-2gtf-635s-aaab	None	34.0.0rc4
2024-04-24T06:33:59.820296+00:00	Nginx Importer	Affected by	VCID-2gtf-635s-aaab	https://nginx.org/en/security_advisories.html	34.0.0rc4
2024-04-24T06:33:52.183077+00:00	Nginx Importer	Affected by	VCID-q6hd-xazy-aaaj	https://nginx.org/en/security_advisories.html	34.0.0rc4
2024-04-24T06:33:44.259301+00:00	Nginx Importer	Affected by	VCID-q6hd-xazy-aaaj	None	34.0.0rc4
2024-04-24T06:33:33.875928+00:00	Nginx Importer	Affected by	VCID-xdng-3k7v-aaaj	None	34.0.0rc4
2024-04-24T06:33:28.381902+00:00	Nginx Importer	Affected by	VCID-xdng-3k7v-aaaj	https://nginx.org/en/security_advisories.html	34.0.0rc4
2024-04-24T06:33:21.633224+00:00	Nginx Importer	Affected by	VCID-srtd-t3v1-aaag	None	34.0.0rc4
2024-04-24T06:33:19.019177+00:00	Nginx Importer	Affected by	VCID-srtd-t3v1-aaag	https://nginx.org/en/security_advisories.html	34.0.0rc4
2024-04-24T06:33:13.603496+00:00	Nginx Importer	Affected by	VCID-t7tm-t2rh-aaah	None	34.0.0rc4
2024-04-24T06:33:10.945047+00:00	Nginx Importer	Affected by	VCID-t7tm-t2rh-aaah	https://nginx.org/en/security_advisories.html	34.0.0rc4
2024-04-24T06:33:05.195066+00:00	Nginx Importer	Affected by	VCID-vkg1-2urs-aaap	https://nginx.org/en/security_advisories.html	34.0.0rc4
2024-04-24T06:33:02.352792+00:00	Nginx Importer	Affected by	VCID-vkg1-2urs-aaap	None	34.0.0rc4
2024-04-24T06:32:55.743965+00:00	Nginx Importer	Affected by	VCID-vhnt-d662-aaaf	https://nginx.org/en/security_advisories.html	34.0.0rc4
2024-04-24T06:32:52.041170+00:00	Nginx Importer	Affected by	VCID-vhnt-d662-aaaf	None	34.0.0rc4
2024-04-24T06:32:46.045518+00:00	Nginx Importer	Affected by	VCID-2x69-4b6w-aaak	https://nginx.org/en/security_advisories.html	34.0.0rc4
2024-04-24T06:32:43.276824+00:00	Nginx Importer	Affected by	VCID-2x69-4b6w-aaak	None	34.0.0rc4
2024-04-24T06:32:38.101994+00:00	Nginx Importer	Affected by	VCID-gzny-ttqs-aaaf	None	34.0.0rc4
2024-04-24T06:32:35.491828+00:00	Nginx Importer	Affected by	VCID-gzny-ttqs-aaaf	https://nginx.org/en/security_advisories.html	34.0.0rc4
2024-04-24T06:32:26.712297+00:00	Nginx Importer	Affected by	VCID-5w8z-sn91-aaaf	https://nginx.org/en/security_advisories.html	34.0.0rc4
2024-04-24T06:32:21.449031+00:00	Nginx Importer	Affected by	VCID-5w8z-sn91-aaaf	None	34.0.0rc4
2024-01-10T09:03:00.308747+00:00	Nginx Importer	Affected by	VCID-2gtf-635s-aaab	None	34.0.0rc2
2024-01-10T09:02:55.781800+00:00	Nginx Importer	Affected by	VCID-2gtf-635s-aaab	https://nginx.org/en/security_advisories.html	34.0.0rc2
2024-01-10T09:02:47.001283+00:00	Nginx Importer	Affected by	VCID-q6hd-xazy-aaaj	https://nginx.org/en/security_advisories.html	34.0.0rc2
2024-01-10T09:02:38.110030+00:00	Nginx Importer	Affected by	VCID-q6hd-xazy-aaaj	None	34.0.0rc2
2024-01-10T09:02:27.337079+00:00	Nginx Importer	Affected by	VCID-xdng-3k7v-aaaj	None	34.0.0rc2
2024-01-10T09:02:21.415895+00:00	Nginx Importer	Affected by	VCID-xdng-3k7v-aaaj	https://nginx.org/en/security_advisories.html	34.0.0rc2
2024-01-10T09:02:13.632222+00:00	Nginx Importer	Affected by	VCID-srtd-t3v1-aaag	None	34.0.0rc2
2024-01-10T09:02:10.451382+00:00	Nginx Importer	Affected by	VCID-srtd-t3v1-aaag	https://nginx.org/en/security_advisories.html	34.0.0rc2
2024-01-10T09:02:04.105991+00:00	Nginx Importer	Affected by	VCID-t7tm-t2rh-aaah	None	34.0.0rc2
2024-01-10T09:02:00.345793+00:00	Nginx Importer	Affected by	VCID-t7tm-t2rh-aaah	https://nginx.org/en/security_advisories.html	34.0.0rc2
2024-01-10T09:01:53.791221+00:00	Nginx Importer	Affected by	VCID-vkg1-2urs-aaap	https://nginx.org/en/security_advisories.html	34.0.0rc2
2024-01-10T09:01:50.509145+00:00	Nginx Importer	Affected by	VCID-vkg1-2urs-aaap	None	34.0.0rc2
2024-01-10T09:01:43.018303+00:00	Nginx Importer	Affected by	VCID-vhnt-d662-aaaf	https://nginx.org/en/security_advisories.html	34.0.0rc2
2024-01-10T09:01:38.917292+00:00	Nginx Importer	Affected by	VCID-vhnt-d662-aaaf	None	34.0.0rc2
2024-01-10T09:01:32.222288+00:00	Nginx Importer	Affected by	VCID-2x69-4b6w-aaak	https://nginx.org/en/security_advisories.html	34.0.0rc2
2024-01-10T09:01:29.041271+00:00	Nginx Importer	Affected by	VCID-2x69-4b6w-aaak	None	34.0.0rc2
2024-01-10T09:01:22.869286+00:00	Nginx Importer	Affected by	VCID-gzny-ttqs-aaaf	None	34.0.0rc2
2024-01-10T09:01:19.742123+00:00	Nginx Importer	Affected by	VCID-gzny-ttqs-aaaf	https://nginx.org/en/security_advisories.html	34.0.0rc2
2024-01-10T09:01:09.585529+00:00	Nginx Importer	Affected by	VCID-5w8z-sn91-aaaf	https://nginx.org/en/security_advisories.html	34.0.0rc2
2024-01-10T09:01:03.846899+00:00	Nginx Importer	Affected by	VCID-5w8z-sn91-aaaf	None	34.0.0rc2
2024-01-04T01:48:11.448023+00:00	Nginx Importer	Affected by	VCID-2gtf-635s-aaab	None	34.0.0rc1
2024-01-04T01:48:07.132782+00:00	Nginx Importer	Affected by	VCID-2gtf-635s-aaab	https://nginx.org/en/security_advisories.html	34.0.0rc1
2024-01-04T01:47:58.578304+00:00	Nginx Importer	Affected by	VCID-q6hd-xazy-aaaj	https://nginx.org/en/security_advisories.html	34.0.0rc1
2024-01-04T01:47:49.820442+00:00	Nginx Importer	Affected by	VCID-q6hd-xazy-aaaj	None	34.0.0rc1
2024-01-04T01:47:39.349748+00:00	Nginx Importer	Affected by	VCID-xdng-3k7v-aaaj	None	34.0.0rc1
2024-01-04T01:47:33.832291+00:00	Nginx Importer	Affected by	VCID-xdng-3k7v-aaaj	https://nginx.org/en/security_advisories.html	34.0.0rc1
2024-01-04T01:47:26.171575+00:00	Nginx Importer	Affected by	VCID-srtd-t3v1-aaag	None	34.0.0rc1
2024-01-04T01:47:22.924683+00:00	Nginx Importer	Affected by	VCID-srtd-t3v1-aaag	https://nginx.org/en/security_advisories.html	34.0.0rc1
2024-01-04T01:47:16.501608+00:00	Nginx Importer	Affected by	VCID-t7tm-t2rh-aaah	None	34.0.0rc1
2024-01-04T01:47:13.144014+00:00	Nginx Importer	Affected by	VCID-t7tm-t2rh-aaah	https://nginx.org/en/security_advisories.html	34.0.0rc1
2024-01-04T01:47:06.966703+00:00	Nginx Importer	Affected by	VCID-vkg1-2urs-aaap	https://nginx.org/en/security_advisories.html	34.0.0rc1
2024-01-04T01:47:03.730310+00:00	Nginx Importer	Affected by	VCID-vkg1-2urs-aaap	None	34.0.0rc1
2024-01-04T01:46:56.223268+00:00	Nginx Importer	Affected by	VCID-vhnt-d662-aaaf	https://nginx.org/en/security_advisories.html	34.0.0rc1
2024-01-04T01:46:52.353164+00:00	Nginx Importer	Affected by	VCID-vhnt-d662-aaaf	None	34.0.0rc1
2024-01-04T01:46:45.403508+00:00	Nginx Importer	Affected by	VCID-2x69-4b6w-aaak	https://nginx.org/en/security_advisories.html	34.0.0rc1
2024-01-04T01:46:42.293683+00:00	Nginx Importer	Affected by	VCID-2x69-4b6w-aaak	None	34.0.0rc1
2024-01-04T01:46:36.066205+00:00	Nginx Importer	Affected by	VCID-gzny-ttqs-aaaf	None	34.0.0rc1
2024-01-04T01:46:32.932607+00:00	Nginx Importer	Affected by	VCID-gzny-ttqs-aaaf	https://nginx.org/en/security_advisories.html	34.0.0rc1
2024-01-04T01:46:23.488731+00:00	Nginx Importer	Affected by	VCID-5w8z-sn91-aaaf	https://nginx.org/en/security_advisories.html	34.0.0rc1
2024-01-04T01:46:17.735894+00:00	Nginx Importer	Affected by	VCID-5w8z-sn91-aaaf	None	34.0.0rc1