Search for packages
Package details: pkg:nginx/nginx@1.17.2
purl pkg:nginx/nginx@1.17.2
Next non-vulnerable version 1.26.2
Latest non-vulnerable version 1.27.4
Risk 10.0
Vulnerabilities affecting this package (7)
Vulnerability Summary Fixed by
VCID-2gtf-635s-aaab
Aliases:
CVE-2022-41742
NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted audio or video file. The issue affects only NGINX products that are built with the module ngx_http_mp4_module, when the mp4 directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngx_http_mp4_module.
1.22.1
Affected by 1 other vulnerability.
1.23.2
Affected by 1 other vulnerability.
VCID-c9xc-nm4d-aaar
Aliases:
CVE-2024-7347
Buffer overread in the ngx_http_mp4_module
1.26.2
Affected by 0 other vulnerabilities.
1.27.1
Affected by 0 other vulnerabilities.
VCID-q6hd-xazy-aaaj
Aliases:
CVE-2022-41741
NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to corrupt NGINX worker memory, resulting in its termination or potential other impact using a specially crafted audio or video file. The issue affects only NGINX products that are built with the ngx_http_mp4_module, when the mp4 directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngx_http_mp4_module.
1.22.1
Affected by 1 other vulnerability.
1.23.2
Affected by 1 other vulnerability.
VCID-srtd-t3v1-aaag
Aliases:
CVE-2019-9516
Excessive memory usage in HTTP/2 with zero length headers
1.17.3
Affected by 4 other vulnerabilities.
VCID-t7tm-t2rh-aaah
Aliases:
CVE-2019-9513
Excessive CPU usage in HTTP/2 with priority changes
1.17.3
Affected by 4 other vulnerabilities.
VCID-vkg1-2urs-aaap
Aliases:
CVE-2019-9511
Excessive CPU usage in HTTP/2 with small window updates
1.17.3
Affected by 4 other vulnerabilities.
VCID-xdng-3k7v-aaaj
Aliases:
CVE-2021-23017
1-byte memory overwrite in resolver
1.20.1
Affected by 3 other vulnerabilities.
1.21.0
Affected by 3 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T16:26:27.705781+00:00 Nginx Importer Affected by VCID-c9xc-nm4d-aaar https://nginx.org/en/security_advisories.html 36.1.3
2025-06-04T08:01:26.118468+00:00 Nginx Importer Affected by VCID-c9xc-nm4d-aaar https://nginx.org/en/security_advisories.html 36.1.0
2025-06-02T21:53:17.354604+00:00 Nginx Importer Affected by VCID-c9xc-nm4d-aaar https://nginx.org/en/security_advisories.html 36.1.2
2025-04-03T22:47:08.401732+00:00 Nginx Importer Affected by VCID-c9xc-nm4d-aaar https://nginx.org/en/security_advisories.html 36.0.0
2025-03-28T16:29:47.440879+00:00 Nginx Importer Affected by VCID-srtd-t3v1-aaag https://nginx.org/en/security_advisories.html 36.0.0
2025-03-28T16:29:47.363298+00:00 Nginx Importer Affected by VCID-t7tm-t2rh-aaah https://nginx.org/en/security_advisories.html 36.0.0
2025-03-28T16:29:47.280226+00:00 Nginx Importer Affected by VCID-vkg1-2urs-aaap https://nginx.org/en/security_advisories.html 36.0.0
2025-02-18T08:38:36.125735+00:00 Nginx Importer Affected by VCID-c9xc-nm4d-aaar https://nginx.org/en/security_advisories.html 35.1.0
2025-01-16T23:01:18.787193+00:00 Nginx Importer Affected by VCID-srtd-t3v1-aaag None 35.1.0
2025-01-16T23:01:18.745157+00:00 Nginx Importer Affected by VCID-t7tm-t2rh-aaah None 35.1.0
2025-01-16T23:01:18.701025+00:00 Nginx Importer Affected by VCID-vkg1-2urs-aaap None 35.1.0
2024-10-08T04:28:21.950951+00:00 Nginx Importer Affected by VCID-c9xc-nm4d-aaar https://nginx.org/en/security_advisories.html 34.0.2
2024-10-08T04:28:04.419484+00:00 Nginx Importer Affected by VCID-2gtf-635s-aaab https://nginx.org/en/security_advisories.html 34.0.2
2024-10-08T04:28:00.176861+00:00 Nginx Importer Affected by VCID-q6hd-xazy-aaaj https://nginx.org/en/security_advisories.html 34.0.2
2024-10-08T04:27:54.549692+00:00 Nginx Importer Affected by VCID-xdng-3k7v-aaaj https://nginx.org/en/security_advisories.html 34.0.2
2024-10-08T04:27:50.355154+00:00 Nginx Importer Affected by VCID-srtd-t3v1-aaag https://nginx.org/en/security_advisories.html 34.0.2
2024-10-08T04:27:47.600159+00:00 Nginx Importer Affected by VCID-t7tm-t2rh-aaah https://nginx.org/en/security_advisories.html 34.0.2
2024-10-08T04:27:44.475208+00:00 Nginx Importer Affected by VCID-vkg1-2urs-aaap https://nginx.org/en/security_advisories.html 34.0.2
2024-09-23T04:09:42.260185+00:00 Nginx Importer Affected by VCID-c9xc-nm4d-aaar https://nginx.org/en/security_advisories.html 34.0.1
2024-09-23T04:09:24.926601+00:00 Nginx Importer Affected by VCID-2gtf-635s-aaab https://nginx.org/en/security_advisories.html 34.0.1
2024-09-23T04:09:20.905666+00:00 Nginx Importer Affected by VCID-q6hd-xazy-aaaj https://nginx.org/en/security_advisories.html 34.0.1
2024-09-23T04:09:16.228654+00:00 Nginx Importer Affected by VCID-xdng-3k7v-aaaj https://nginx.org/en/security_advisories.html 34.0.1
2024-09-17T22:48:22.608522+00:00 Nginx Importer Affected by VCID-srtd-t3v1-aaag https://nginx.org/en/security_advisories.html 34.0.1
2024-09-17T22:48:22.558375+00:00 Nginx Importer Affected by VCID-t7tm-t2rh-aaah https://nginx.org/en/security_advisories.html 34.0.1
2024-09-17T22:48:22.508081+00:00 Nginx Importer Affected by VCID-vkg1-2urs-aaap https://nginx.org/en/security_advisories.html 34.0.1
2024-04-24T06:34:04.073107+00:00 Nginx Importer Affected by VCID-2gtf-635s-aaab None 34.0.0rc4
2024-04-24T06:33:59.971110+00:00 Nginx Importer Affected by VCID-2gtf-635s-aaab https://nginx.org/en/security_advisories.html 34.0.0rc4
2024-04-24T06:33:52.333980+00:00 Nginx Importer Affected by VCID-q6hd-xazy-aaaj https://nginx.org/en/security_advisories.html 34.0.0rc4
2024-04-24T06:33:44.408648+00:00 Nginx Importer Affected by VCID-q6hd-xazy-aaaj None 34.0.0rc4
2024-04-24T06:33:34.028753+00:00 Nginx Importer Affected by VCID-xdng-3k7v-aaaj None 34.0.0rc4
2024-04-24T06:33:28.532648+00:00 Nginx Importer Affected by VCID-xdng-3k7v-aaaj https://nginx.org/en/security_advisories.html 34.0.0rc4
2024-04-24T06:33:21.765280+00:00 Nginx Importer Affected by VCID-srtd-t3v1-aaag None 34.0.0rc4
2024-04-24T06:33:19.149187+00:00 Nginx Importer Affected by VCID-srtd-t3v1-aaag https://nginx.org/en/security_advisories.html 34.0.0rc4
2024-04-24T06:33:13.748248+00:00 Nginx Importer Affected by VCID-t7tm-t2rh-aaah None 34.0.0rc4
2024-04-24T06:33:11.090833+00:00 Nginx Importer Affected by VCID-t7tm-t2rh-aaah https://nginx.org/en/security_advisories.html 34.0.0rc4
2024-04-24T06:33:05.341011+00:00 Nginx Importer Affected by VCID-vkg1-2urs-aaap https://nginx.org/en/security_advisories.html 34.0.0rc4
2024-04-24T06:33:02.497255+00:00 Nginx Importer Affected by VCID-vkg1-2urs-aaap None 34.0.0rc4
2024-01-10T09:03:00.458062+00:00 Nginx Importer Affected by VCID-2gtf-635s-aaab None 34.0.0rc2
2024-01-10T09:02:55.932542+00:00 Nginx Importer Affected by VCID-2gtf-635s-aaab https://nginx.org/en/security_advisories.html 34.0.0rc2
2024-01-10T09:02:47.152201+00:00 Nginx Importer Affected by VCID-q6hd-xazy-aaaj https://nginx.org/en/security_advisories.html 34.0.0rc2
2024-01-10T09:02:38.259289+00:00 Nginx Importer Affected by VCID-q6hd-xazy-aaaj None 34.0.0rc2
2024-01-10T09:02:27.490673+00:00 Nginx Importer Affected by VCID-xdng-3k7v-aaaj None 34.0.0rc2
2024-01-10T09:02:21.566713+00:00 Nginx Importer Affected by VCID-xdng-3k7v-aaaj https://nginx.org/en/security_advisories.html 34.0.0rc2
2024-01-10T09:02:13.776699+00:00 Nginx Importer Affected by VCID-srtd-t3v1-aaag None 34.0.0rc2
2024-01-10T09:02:10.596796+00:00 Nginx Importer Affected by VCID-srtd-t3v1-aaag https://nginx.org/en/security_advisories.html 34.0.0rc2
2024-01-10T09:02:04.250477+00:00 Nginx Importer Affected by VCID-t7tm-t2rh-aaah None 34.0.0rc2
2024-01-10T09:02:00.491366+00:00 Nginx Importer Affected by VCID-t7tm-t2rh-aaah https://nginx.org/en/security_advisories.html 34.0.0rc2
2024-01-10T09:01:53.936785+00:00 Nginx Importer Affected by VCID-vkg1-2urs-aaap https://nginx.org/en/security_advisories.html 34.0.0rc2
2024-01-10T09:01:50.653019+00:00 Nginx Importer Affected by VCID-vkg1-2urs-aaap None 34.0.0rc2
2024-01-04T01:48:11.598627+00:00 Nginx Importer Affected by VCID-2gtf-635s-aaab None 34.0.0rc1
2024-01-04T01:48:07.274148+00:00 Nginx Importer Affected by VCID-2gtf-635s-aaab https://nginx.org/en/security_advisories.html 34.0.0rc1
2024-01-04T01:47:58.731401+00:00 Nginx Importer Affected by VCID-q6hd-xazy-aaaj https://nginx.org/en/security_advisories.html 34.0.0rc1
2024-01-04T01:47:49.968092+00:00 Nginx Importer Affected by VCID-q6hd-xazy-aaaj None 34.0.0rc1
2024-01-04T01:47:39.498498+00:00 Nginx Importer Affected by VCID-xdng-3k7v-aaaj None 34.0.0rc1
2024-01-04T01:47:33.966481+00:00 Nginx Importer Affected by VCID-xdng-3k7v-aaaj https://nginx.org/en/security_advisories.html 34.0.0rc1
2024-01-04T01:47:26.314397+00:00 Nginx Importer Affected by VCID-srtd-t3v1-aaag None 34.0.0rc1
2024-01-04T01:47:16.638331+00:00 Nginx Importer Affected by VCID-t7tm-t2rh-aaah None 34.0.0rc1
2024-01-04T01:47:03.878810+00:00 Nginx Importer Affected by VCID-vkg1-2urs-aaap None 34.0.0rc1
2024-01-03T18:31:51.300141+00:00 Nginx Importer Affected by VCID-srtd-t3v1-aaag https://nginx.org/en/security_advisories.html 34.0.0rc1
2024-01-03T18:31:51.251361+00:00 Nginx Importer Affected by VCID-t7tm-t2rh-aaah https://nginx.org/en/security_advisories.html 34.0.0rc1
2024-01-03T18:31:51.199487+00:00 Nginx Importer Affected by VCID-vkg1-2urs-aaap https://nginx.org/en/security_advisories.html 34.0.0rc1