Search for packages
| purl | pkg:nginx/nginx@1.21.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-2gtf-635s-aaab
Aliases: CVE-2022-41742 |
NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted audio or video file. The issue affects only NGINX products that are built with the module ngx_http_mp4_module, when the mp4 directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngx_http_mp4_module. |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
|
VCID-c9xc-nm4d-aaar
Aliases: CVE-2024-7347 |
Buffer overread in the ngx_http_mp4_module |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-q6hd-xazy-aaaj
Aliases: CVE-2022-41741 |
NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to corrupt NGINX worker memory, resulting in its termination or potential other impact using a specially crafted audio or video file. The issue affects only NGINX products that are built with the ngx_http_mp4_module, when the mp4 directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngx_http_mp4_module. |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-20T16:26:27.758517+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 36.1.3 |
| 2025-06-04T08:01:26.162165+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 36.1.0 |
| 2025-06-02T21:53:17.413797+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 36.1.2 |
| 2025-04-03T22:47:08.546615+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 36.0.0 |
| 2025-02-18T08:38:36.268915+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 35.1.0 |
| 2024-10-08T04:28:22.100321+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-10-08T04:28:04.558218+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-10-08T04:28:00.316434+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | https://nginx.org/en/security_advisories.html | 34.0.2 |
| 2024-09-23T04:09:42.414648+00:00 | Nginx Importer | Affected by | VCID-c9xc-nm4d-aaar | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-09-23T04:09:25.065083+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-09-23T04:09:21.044275+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | https://nginx.org/en/security_advisories.html | 34.0.1 |
| 2024-04-24T06:34:04.207780+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | None | 34.0.0rc4 |
| 2024-04-24T06:34:00.107285+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | https://nginx.org/en/security_advisories.html | 34.0.0rc4 |
| 2024-04-24T06:33:52.469510+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | https://nginx.org/en/security_advisories.html | 34.0.0rc4 |
| 2024-04-24T06:33:44.543432+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | None | 34.0.0rc4 |
| 2024-01-10T09:03:00.592744+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | None | 34.0.0rc2 |
| 2024-01-10T09:02:56.068673+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | https://nginx.org/en/security_advisories.html | 34.0.0rc2 |
| 2024-01-10T09:02:47.287483+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | https://nginx.org/en/security_advisories.html | 34.0.0rc2 |
| 2024-01-10T09:02:38.395938+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | None | 34.0.0rc2 |
| 2024-01-04T01:48:11.733191+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | None | 34.0.0rc1 |
| 2024-01-04T01:48:07.409418+00:00 | Nginx Importer | Affected by | VCID-2gtf-635s-aaab | https://nginx.org/en/security_advisories.html | 34.0.0rc1 |
| 2024-01-04T01:47:58.866626+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | https://nginx.org/en/security_advisories.html | 34.0.0rc1 |
| 2024-01-04T01:47:50.102577+00:00 | Nginx Importer | Affected by | VCID-q6hd-xazy-aaaj | None | 34.0.0rc1 |