Search for packages
| purl | pkg:nginx/nginx@1.15.8 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-2gtf-635s-aaab
Aliases: CVE-2022-41742 |
NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted audio or video file. The issue affects only NGINX products that are built with the module ngx_http_mp4_module, when the mp4 directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngx_http_mp4_module. |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
|
VCID-c9xc-nm4d-aaar
Aliases: CVE-2024-7347 |
Buffer overread in the ngx_http_mp4_module |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-q6hd-xazy-aaaj
Aliases: CVE-2022-41741 |
NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to corrupt NGINX worker memory, resulting in its termination or potential other impact using a specially crafted audio or video file. The issue affects only NGINX products that are built with the ngx_http_mp4_module, when the mp4 directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngx_http_mp4_module. |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
|
VCID-srtd-t3v1-aaag
Aliases: CVE-2019-9516 |
Excessive memory usage in HTTP/2 with zero length headers |
Affected by 4 other vulnerabilities. Affected by 4 other vulnerabilities. |
|
VCID-t7tm-t2rh-aaah
Aliases: CVE-2019-9513 |
Excessive CPU usage in HTTP/2 with priority changes |
Affected by 4 other vulnerabilities. Affected by 4 other vulnerabilities. |
|
VCID-vkg1-2urs-aaap
Aliases: CVE-2019-9511 |
Excessive CPU usage in HTTP/2 with small window updates |
Affected by 4 other vulnerabilities. Affected by 4 other vulnerabilities. |
|
VCID-xdng-3k7v-aaaj
Aliases: CVE-2021-23017 |
1-byte memory overwrite in resolver |
Affected by 3 other vulnerabilities. Affected by 3 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-20T16:26:27.689313+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 36.1.3 |
| 2025-06-04T08:01:26.104838+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 36.1.0 |
| 2025-06-02T21:53:17.336021+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 36.1.2 |
| 2025-04-03T22:47:08.356640+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 36.0.0 |
| 2025-02-18T08:38:36.081933+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 35.1.0 |
| 2024-10-08T04:28:21.904331+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-10-08T04:28:04.376190+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-10-08T04:28:00.133796+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-10-08T04:27:54.506413+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-10-08T04:27:50.316846+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-10-08T04:27:47.561798+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-10-08T04:27:44.436837+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-09-23T04:09:42.211639+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-09-23T04:09:24.883501+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-09-23T04:09:20.862331+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-09-23T04:09:16.185234+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-09-23T04:09:11.991222+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-09-23T04:09:09.216174+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-09-23T04:09:06.391365+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-04-24T06:34:04.031064+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | None | 34.0.0rc4 |
| 2024-04-24T06:33:59.928700+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | https://nginx.org/en/security_advisories.html | 34.0.0rc4 |
| 2024-04-24T06:33:52.291627+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | https://nginx.org/en/security_advisories.html | 34.0.0rc4 |
| 2024-04-24T06:33:44.366910+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | None | 34.0.0rc4 |
| 2024-04-24T06:33:33.986851+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | None | 34.0.0rc4 |
| 2024-04-24T06:33:28.490342+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | https://nginx.org/en/security_advisories.html | 34.0.0rc4 |
| 2024-04-24T06:33:21.731288+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | None | 34.0.0rc4 |
| 2024-04-24T06:33:19.116217+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | https://nginx.org/en/security_advisories.html | 34.0.0rc4 |
| 2024-04-24T06:33:13.711071+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | None | 34.0.0rc4 |
| 2024-04-24T06:33:11.053423+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | https://nginx.org/en/security_advisories.html | 34.0.0rc4 |
| 2024-04-24T06:33:05.303493+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | https://nginx.org/en/security_advisories.html | 34.0.0rc4 |
| 2024-04-24T06:33:02.459985+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | None | 34.0.0rc4 |
| 2024-01-10T09:03:00.416049+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | None | 34.0.0rc2 |
| 2024-01-10T09:02:55.890140+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | https://nginx.org/en/security_advisories.html | 34.0.0rc2 |
| 2024-01-10T09:02:47.109797+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | https://nginx.org/en/security_advisories.html | 34.0.0rc2 |
| 2024-01-10T09:02:38.217464+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | None | 34.0.0rc2 |
| 2024-01-10T09:02:27.448671+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | None | 34.0.0rc2 |
| 2024-01-10T09:02:21.524336+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | https://nginx.org/en/security_advisories.html | 34.0.0rc2 |
| 2024-01-10T09:02:13.739434+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | None | 34.0.0rc2 |
| 2024-01-10T09:02:10.559462+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | https://nginx.org/en/security_advisories.html | 34.0.0rc2 |
| 2024-01-10T09:02:04.213354+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | None | 34.0.0rc2 |
| 2024-01-10T09:02:00.453782+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | https://nginx.org/en/security_advisories.html | 34.0.0rc2 |
| 2024-01-10T09:01:53.899353+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | https://nginx.org/en/security_advisories.html | 34.0.0rc2 |
| 2024-01-10T09:01:50.615840+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | None | 34.0.0rc2 |
| 2024-01-04T01:48:11.555005+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | None | 34.0.0rc1 |
| 2024-01-04T01:48:07.232925+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | https://nginx.org/en/security_advisories.html | 34.0.0rc1 |
| 2024-01-04T01:47:58.689385+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | https://nginx.org/en/security_advisories.html | 34.0.0rc1 |
| 2024-01-04T01:47:49.926589+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | None | 34.0.0rc1 |
| 2024-01-04T01:47:39.456688+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | None | 34.0.0rc1 |
| 2024-01-04T01:47:33.928051+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | https://nginx.org/en/security_advisories.html | 34.0.0rc1 |
| 2024-01-04T01:47:26.277599+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | None | 34.0.0rc1 |
| 2024-01-04T01:47:23.031650+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | https://nginx.org/en/security_advisories.html | 34.0.0rc1 |
| 2024-01-04T01:47:16.604012+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | None | 34.0.0rc1 |
| 2024-01-04T01:47:13.251199+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | https://nginx.org/en/security_advisories.html | 34.0.0rc1 |
| 2024-01-04T01:47:07.079308+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | https://nginx.org/en/security_advisories.html | 34.0.0rc1 |
| 2024-01-04T01:47:03.841223+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | None | 34.0.0rc1 |