Search for packages
| purl | pkg:nginx/nginx@1.15.9 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-2gtf-635s-aaab
Aliases: CVE-2022-41742 |
NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted audio or video file. The issue affects only NGINX products that are built with the module ngx_http_mp4_module, when the mp4 directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngx_http_mp4_module. |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
|
VCID-c9xc-nm4d-aaar
Aliases: CVE-2024-7347 |
Buffer overread in the ngx_http_mp4_module |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-q6hd-xazy-aaaj
Aliases: CVE-2022-41741 |
NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to corrupt NGINX worker memory, resulting in its termination or potential other impact using a specially crafted audio or video file. The issue affects only NGINX products that are built with the ngx_http_mp4_module, when the mp4 directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngx_http_mp4_module. |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
|
VCID-srtd-t3v1-aaag
Aliases: CVE-2019-9516 |
Excessive memory usage in HTTP/2 with zero length headers |
Affected by 4 other vulnerabilities. Affected by 4 other vulnerabilities. |
|
VCID-t7tm-t2rh-aaah
Aliases: CVE-2019-9513 |
Excessive CPU usage in HTTP/2 with priority changes |
Affected by 4 other vulnerabilities. Affected by 4 other vulnerabilities. |
|
VCID-vkg1-2urs-aaap
Aliases: CVE-2019-9511 |
Excessive CPU usage in HTTP/2 with small window updates |
Affected by 4 other vulnerabilities. Affected by 4 other vulnerabilities. |
|
VCID-xdng-3k7v-aaaj
Aliases: CVE-2021-23017 |
1-byte memory overwrite in resolver |
Affected by 3 other vulnerabilities. Affected by 3 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-20T16:26:27.691152+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 36.1.3 |
| 2025-06-04T08:01:26.106312+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 36.1.0 |
| 2025-06-02T21:53:17.338017+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 36.1.2 |
| 2025-04-03T22:47:08.361717+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 36.0.0 |
| 2025-02-18T08:38:36.086812+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 35.1.0 |
| 2024-10-08T04:28:21.909557+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-10-08T04:28:04.380804+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-10-08T04:28:00.138602+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-10-08T04:27:54.511214+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-10-08T04:27:50.321678+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-10-08T04:27:47.566545+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-10-08T04:27:44.441652+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-09-23T04:09:42.216908+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-09-23T04:09:24.888337+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-09-23T04:09:20.867133+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-09-23T04:09:16.190056+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-09-23T04:09:11.996062+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-09-23T04:09:09.220914+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-09-23T04:09:06.395755+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-04-24T06:34:04.035760+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | None | 34.0.0rc4 |
| 2024-04-24T06:33:59.933418+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | https://nginx.org/en/security_advisories.html | 34.0.0rc4 |
| 2024-04-24T06:33:52.296363+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | https://nginx.org/en/security_advisories.html | 34.0.0rc4 |
| 2024-04-24T06:33:44.371487+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | None | 34.0.0rc4 |
| 2024-04-24T06:33:33.991446+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | None | 34.0.0rc4 |
| 2024-04-24T06:33:28.495070+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | https://nginx.org/en/security_advisories.html | 34.0.0rc4 |
| 2024-04-24T06:33:21.735536+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | None | 34.0.0rc4 |
| 2024-04-24T06:33:19.119873+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | https://nginx.org/en/security_advisories.html | 34.0.0rc4 |
| 2024-04-24T06:33:13.715739+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | None | 34.0.0rc4 |
| 2024-04-24T06:33:11.058060+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | https://nginx.org/en/security_advisories.html | 34.0.0rc4 |
| 2024-04-24T06:33:05.308247+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | https://nginx.org/en/security_advisories.html | 34.0.0rc4 |
| 2024-04-24T06:33:02.464701+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | None | 34.0.0rc4 |
| 2024-01-10T09:03:00.420714+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | None | 34.0.0rc2 |
| 2024-01-10T09:02:55.894877+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | https://nginx.org/en/security_advisories.html | 34.0.0rc2 |
| 2024-01-10T09:02:47.114437+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | https://nginx.org/en/security_advisories.html | 34.0.0rc2 |
| 2024-01-10T09:02:38.222108+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | None | 34.0.0rc2 |
| 2024-01-10T09:02:27.453362+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | None | 34.0.0rc2 |
| 2024-01-10T09:02:21.528977+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | https://nginx.org/en/security_advisories.html | 34.0.0rc2 |
| 2024-01-10T09:02:13.744136+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | None | 34.0.0rc2 |
| 2024-01-10T09:02:10.564191+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | https://nginx.org/en/security_advisories.html | 34.0.0rc2 |
| 2024-01-10T09:02:04.217952+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | None | 34.0.0rc2 |
| 2024-01-10T09:02:00.458408+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | https://nginx.org/en/security_advisories.html | 34.0.0rc2 |
| 2024-01-10T09:01:53.904073+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | https://nginx.org/en/security_advisories.html | 34.0.0rc2 |
| 2024-01-10T09:01:50.620579+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | None | 34.0.0rc2 |
| 2024-01-04T01:48:11.559669+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | None | 34.0.0rc1 |
| 2024-01-04T01:48:07.237276+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | https://nginx.org/en/security_advisories.html | 34.0.0rc1 |
| 2024-01-04T01:47:58.694016+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | https://nginx.org/en/security_advisories.html | 34.0.0rc1 |
| 2024-01-04T01:47:49.931140+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | None | 34.0.0rc1 |
| 2024-01-04T01:47:39.461332+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | None | 34.0.0rc1 |
| 2024-01-04T01:47:33.932333+00:00 | Nginx Importer | Affected by | VCID-xdng-3k7v-aaaj | https://nginx.org/en/security_advisories.html | 34.0.0rc1 |
| 2024-01-04T01:47:26.282175+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | None | 34.0.0rc1 |
| 2024-01-04T01:47:23.036373+00:00 | Nginx Importer | Affected by | VCID-srtd-t3v1-aaag | https://nginx.org/en/security_advisories.html | 34.0.0rc1 |
| 2024-01-04T01:47:16.608326+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | None | 34.0.0rc1 |
| 2024-01-04T01:47:13.255873+00:00 | Nginx Importer | Affected by | VCID-t7tm-t2rh-aaah | https://nginx.org/en/security_advisories.html | 34.0.0rc1 |
| 2024-01-04T01:47:07.084162+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | https://nginx.org/en/security_advisories.html | 34.0.0rc1 |
| 2024-01-04T01:47:03.845965+00:00 | Nginx Importer | Affected by | VCID-vkg1-2urs-aaap | None | 34.0.0rc1 |