Search for packages
| purl | pkg:nginx/nginx@1.15.11 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-2gtf-635s-aaab
Aliases: CVE-2022-41742 |
NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted audio or video file. The issue affects only NGINX products that are built with the module ngx_http_mp4_module, when the mp4 directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngx_http_mp4_module. |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
|
VCID-c9xc-nm4d-aaar
Aliases: CVE-2024-7347 |
Buffer overread in the ngx_http_mp4_module |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-q6hd-xazy-aaaj
Aliases: CVE-2022-41741 |
NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to corrupt NGINX worker memory, resulting in its termination or potential other impact using a specially crafted audio or video file. The issue affects only NGINX products that are built with the ngx_http_mp4_module, when the mp4 directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngx_http_mp4_module. |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
|
VCID-srtd-t3v1-aaag
Aliases: CVE-2019-9516 |
Excessive memory usage in HTTP/2 with zero length headers |
Affected by 4 other vulnerabilities. Affected by 4 other vulnerabilities. |
|
VCID-t7tm-t2rh-aaah
Aliases: CVE-2019-9513 |
Excessive CPU usage in HTTP/2 with priority changes |
Affected by 4 other vulnerabilities. Affected by 4 other vulnerabilities. |
|
VCID-vkg1-2urs-aaap
Aliases: CVE-2019-9511 |
Excessive CPU usage in HTTP/2 with small window updates |
Affected by 4 other vulnerabilities. Affected by 4 other vulnerabilities. |
|
VCID-xdng-3k7v-aaaj
Aliases: CVE-2021-23017 |
1-byte memory overwrite in resolver |
Affected by 3 other vulnerabilities. Affected by 3 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-20T16:26:27.694821+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 36.1.3 |
| 2025-06-04T08:01:26.109270+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 36.1.0 |
| 2025-06-02T21:53:17.343063+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 36.1.2 |
| 2025-04-03T22:47:08.371638+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 36.0.0 |
| 2025-02-18T08:38:36.096541+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 35.1.0 |
| 2024-10-08T04:28:21.919938+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-10-08T04:28:04.390379+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-10-08T04:28:00.148220+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-10-08T04:27:54.520848+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-10-08T04:27:50.331253+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-10-08T04:27:47.576246+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-10-08T04:27:44.451179+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-09-23T04:09:42.227638+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-09-23T04:09:24.897901+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-09-23T04:09:20.876727+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-09-23T04:09:16.199712+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-09-23T04:09:12.005753+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-09-23T04:09:09.230463+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-09-23T04:09:06.404569+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-04-24T06:34:04.045086+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | None | 34.0.0rc4 |
| 2024-04-24T06:33:59.942822+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | https://nginx.org/en/security_advisories.html | 34.0.0rc4 |
| 2024-04-24T06:33:52.305747+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | https://nginx.org/en/security_advisories.html | 34.0.0rc4 |
| 2024-04-24T06:33:44.380754+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | None | 34.0.0rc4 |
| 2024-04-24T06:33:34.000770+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | None | 34.0.0rc4 |
| 2024-04-24T06:33:28.504534+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | https://nginx.org/en/security_advisories.html | 34.0.0rc4 |
| 2024-04-24T06:33:21.744044+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | None | 34.0.0rc4 |
| 2024-04-24T06:33:19.127768+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | https://nginx.org/en/security_advisories.html | 34.0.0rc4 |
| 2024-04-24T06:33:13.725020+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | None | 34.0.0rc4 |
| 2024-04-24T06:33:11.067413+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | https://nginx.org/en/security_advisories.html | 34.0.0rc4 |
| 2024-04-24T06:33:05.317568+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | https://nginx.org/en/security_advisories.html | 34.0.0rc4 |
| 2024-04-24T06:33:02.473950+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | None | 34.0.0rc4 |
| 2024-01-10T09:03:00.430003+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | None | 34.0.0rc2 |
| 2024-01-10T09:02:55.904275+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | https://nginx.org/en/security_advisories.html | 34.0.0rc2 |
| 2024-01-10T09:02:47.123866+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | https://nginx.org/en/security_advisories.html | 34.0.0rc2 |
| 2024-01-10T09:02:38.231373+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | None | 34.0.0rc2 |
| 2024-01-10T09:02:27.462701+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | None | 34.0.0rc2 |
| 2024-01-10T09:02:21.538344+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | https://nginx.org/en/security_advisories.html | 34.0.0rc2 |
| 2024-01-10T09:02:13.753414+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | None | 34.0.0rc2 |
| 2024-01-10T09:02:10.573504+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | https://nginx.org/en/security_advisories.html | 34.0.0rc2 |
| 2024-01-10T09:02:04.227212+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | None | 34.0.0rc2 |
| 2024-01-10T09:02:00.467818+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | https://nginx.org/en/security_advisories.html | 34.0.0rc2 |
| 2024-01-10T09:01:53.913462+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | https://nginx.org/en/security_advisories.html | 34.0.0rc2 |
| 2024-01-10T09:01:50.629939+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | None | 34.0.0rc2 |
| 2024-01-04T01:48:11.568929+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | None | 34.0.0rc1 |
| 2024-01-04T01:48:07.246124+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | https://nginx.org/en/security_advisories.html | 34.0.0rc1 |
| 2024-01-04T01:47:58.703344+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | https://nginx.org/en/security_advisories.html | 34.0.0rc1 |
| 2024-01-04T01:47:49.940442+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | None | 34.0.0rc1 |
| 2024-01-04T01:47:39.470753+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | None | 34.0.0rc1 |
| 2024-01-04T01:47:33.940877+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | https://nginx.org/en/security_advisories.html | 34.0.0rc1 |
| 2024-01-04T01:47:26.291368+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | None | 34.0.0rc1 |
| 2024-01-04T01:47:23.045620+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | https://nginx.org/en/security_advisories.html | 34.0.0rc1 |
| 2024-01-04T01:47:16.616918+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | None | 34.0.0rc1 |
| 2024-01-04T01:47:13.265224+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | https://nginx.org/en/security_advisories.html | 34.0.0rc1 |
| 2024-01-04T01:47:07.093490+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | https://nginx.org/en/security_advisories.html | 34.0.0rc1 |
| 2024-01-04T01:47:03.855406+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | None | 34.0.0rc1 |