Search for packages
| purl | pkg:nginx/nginx@1.15.12 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-2gtf-635s-aaab
Aliases: CVE-2022-41742 |
NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted audio or video file. The issue affects only NGINX products that are built with the module ngx_http_mp4_module, when the mp4 directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngx_http_mp4_module. |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
|
VCID-c9xc-nm4d-aaar
Aliases: CVE-2024-7347 |
Buffer overread in the ngx_http_mp4_module |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-q6hd-xazy-aaaj
Aliases: CVE-2022-41741 |
NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to corrupt NGINX worker memory, resulting in its termination or potential other impact using a specially crafted audio or video file. The issue affects only NGINX products that are built with the ngx_http_mp4_module, when the mp4 directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngx_http_mp4_module. |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
|
VCID-srtd-t3v1-aaag
Aliases: CVE-2019-9516 |
Excessive memory usage in HTTP/2 with zero length headers |
Affected by 4 other vulnerabilities. Affected by 4 other vulnerabilities. |
|
VCID-t7tm-t2rh-aaah
Aliases: CVE-2019-9513 |
Excessive CPU usage in HTTP/2 with priority changes |
Affected by 4 other vulnerabilities. Affected by 4 other vulnerabilities. |
|
VCID-vkg1-2urs-aaap
Aliases: CVE-2019-9511 |
Excessive CPU usage in HTTP/2 with small window updates |
Affected by 4 other vulnerabilities. Affected by 4 other vulnerabilities. |
|
VCID-xdng-3k7v-aaaj
Aliases: CVE-2021-23017 |
1-byte memory overwrite in resolver |
Affected by 3 other vulnerabilities. Affected by 3 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-20T16:26:27.696642+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 36.1.3 |
| 2025-06-04T08:01:26.110766+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 36.1.0 |
| 2025-06-02T21:53:17.345876+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 36.1.2 |
| 2025-04-03T22:47:08.376667+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 36.0.0 |
| 2025-02-18T08:38:36.101437+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 35.1.0 |
| 2024-10-08T04:28:21.925066+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-10-08T04:28:04.395203+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-10-08T04:28:00.152945+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-10-08T04:27:54.525720+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-10-08T04:27:50.336085+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-10-08T04:27:47.580983+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-10-08T04:27:44.456071+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-09-23T04:09:42.232917+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-09-23T04:09:24.902718+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-09-23T04:09:20.881527+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-09-23T04:09:16.204565+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-09-23T04:09:12.010496+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-09-23T04:09:09.235275+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-09-23T04:09:06.408966+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-04-24T06:34:04.049795+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | None | 34.0.0rc4 |
| 2024-04-24T06:33:59.947486+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | https://nginx.org/en/security_advisories.html | 34.0.0rc4 |
| 2024-04-24T06:33:52.310391+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | https://nginx.org/en/security_advisories.html | 34.0.0rc4 |
| 2024-04-24T06:33:44.385438+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | None | 34.0.0rc4 |
| 2024-04-24T06:33:34.005453+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | None | 34.0.0rc4 |
| 2024-04-24T06:33:28.509166+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | https://nginx.org/en/security_advisories.html | 34.0.0rc4 |
| 2024-04-24T06:33:21.748302+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | None | 34.0.0rc4 |
| 2024-04-24T06:33:19.132061+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | https://nginx.org/en/security_advisories.html | 34.0.0rc4 |
| 2024-04-24T06:33:13.729675+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | None | 34.0.0rc4 |
| 2024-04-24T06:33:11.072158+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | https://nginx.org/en/security_advisories.html | 34.0.0rc4 |
| 2024-04-24T06:33:05.322220+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | https://nginx.org/en/security_advisories.html | 34.0.0rc4 |
| 2024-04-24T06:33:02.478611+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | None | 34.0.0rc4 |
| 2024-01-10T09:03:00.434744+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | None | 34.0.0rc2 |
| 2024-01-10T09:02:55.908902+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | https://nginx.org/en/security_advisories.html | 34.0.0rc2 |
| 2024-01-10T09:02:47.128595+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | https://nginx.org/en/security_advisories.html | 34.0.0rc2 |
| 2024-01-10T09:02:38.236070+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | None | 34.0.0rc2 |
| 2024-01-10T09:02:27.467302+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | None | 34.0.0rc2 |
| 2024-01-10T09:02:21.543062+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | https://nginx.org/en/security_advisories.html | 34.0.0rc2 |
| 2024-01-10T09:02:13.758030+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | None | 34.0.0rc2 |
| 2024-01-10T09:02:10.578130+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | https://nginx.org/en/security_advisories.html | 34.0.0rc2 |
| 2024-01-10T09:02:04.231882+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | None | 34.0.0rc2 |
| 2024-01-10T09:02:00.472554+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | https://nginx.org/en/security_advisories.html | 34.0.0rc2 |
| 2024-01-10T09:01:53.918097+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | https://nginx.org/en/security_advisories.html | 34.0.0rc2 |
| 2024-01-10T09:01:50.634604+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | None | 34.0.0rc2 |
| 2024-01-04T01:48:11.573571+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | None | 34.0.0rc1 |
| 2024-01-04T01:48:07.250856+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | https://nginx.org/en/security_advisories.html | 34.0.0rc1 |
| 2024-01-04T01:47:58.708061+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | https://nginx.org/en/security_advisories.html | 34.0.0rc1 |
| 2024-01-04T01:47:49.945006+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | None | 34.0.0rc1 |
| 2024-01-04T01:47:39.475341+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | None | 34.0.0rc1 |
| 2024-01-04T01:47:33.945139+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | https://nginx.org/en/security_advisories.html | 34.0.0rc1 |
| 2024-01-04T01:47:26.296017+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | None | 34.0.0rc1 |
| 2024-01-04T01:47:23.050248+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | https://nginx.org/en/security_advisories.html | 34.0.0rc1 |
| 2024-01-04T01:47:16.621204+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | None | 34.0.0rc1 |
| 2024-01-04T01:47:13.269911+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | https://nginx.org/en/security_advisories.html | 34.0.0rc1 |
| 2024-01-04T01:47:07.098660+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | https://nginx.org/en/security_advisories.html | 34.0.0rc1 |
| 2024-01-04T01:47:03.860058+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | None | 34.0.0rc1 |