VulnerableCode Package Details - pkg:nginx/nginx@1.22.0

Search for packages

Vulnerability	Summary	Fixed by
VCID-2gtf-635s-aaab Aliases: CVE-2022-41742	NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted audio or video file. The issue affects only NGINX products that are built with the module ngx_http_mp4_module, when the mp4 directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngx_http_mp4_module.	1.22.1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1.23.2 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-c9xc-nm4d-aaar Aliases: CVE-2024-7347	Buffer overread in the ngx_http_mp4_module	1.26.2 Affected by 0 other vulnerabilities. 1.27.1 Affected by 0 other vulnerabilities.
VCID-q6hd-xazy-aaaj Aliases: CVE-2022-41741	NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to corrupt NGINX worker memory, resulting in its termination or potential other impact using a specially crafted audio or video file. The issue affects only NGINX products that are built with the ngx_http_mp4_module, when the mp4 directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngx_http_mp4_module.	1.22.1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1.23.2 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-2gtf-635s-aaab
Aliases:
CVE-2022-41742

NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted audio or video file. The issue affects only NGINX products that are built with the module ngx_http_mp4_module, when the mp4 directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngx_http_mp4_module.

1.22.1
Affected by 1 other vulnerability.

1.23.2
Affected by 1 other vulnerability.

VCID-c9xc-nm4d-aaar
Aliases:
CVE-2024-7347

Buffer overread in the ngx_http_mp4_module

1.26.2
Affected by 0 other vulnerabilities.

1.27.1
Affected by 0 other vulnerabilities.

VCID-q6hd-xazy-aaaj
Aliases:
CVE-2022-41741

NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to corrupt NGINX worker memory, resulting in its termination or potential other impact using a specially crafted audio or video file. The issue affects only NGINX products that are built with the ngx_http_mp4_module, when the mp4 directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngx_http_mp4_module.

1.22.1
Affected by 1 other vulnerability.

1.23.2
Affected by 1 other vulnerability.

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Vulnerability

Summary

Aliases

This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2025-06-20T16:26:27.762135+00:00	Nginx Importer	Affected by	VCID-c9xc-nm4d-aaar	https://nginx.org/en/security_advisories.html	36.1.3
2025-06-04T08:01:26.165137+00:00	Nginx Importer	Affected by	VCID-c9xc-nm4d-aaar	https://nginx.org/en/security_advisories.html	36.1.0
2025-06-02T21:53:17.417870+00:00	Nginx Importer	Affected by	VCID-c9xc-nm4d-aaar	https://nginx.org/en/security_advisories.html	36.1.2
2025-04-03T22:47:08.556632+00:00	Nginx Importer	Affected by	VCID-c9xc-nm4d-aaar	https://nginx.org/en/security_advisories.html	36.0.0
2025-02-18T08:38:36.278862+00:00	Nginx Importer	Affected by	VCID-c9xc-nm4d-aaar	https://nginx.org/en/security_advisories.html	35.1.0
2024-10-08T04:28:22.110356+00:00	Nginx Importer	Affected by	VCID-c9xc-nm4d-aaar	https://nginx.org/en/security_advisories.html	34.0.2
2024-10-08T04:28:04.567833+00:00	Nginx Importer	Affected by	VCID-2gtf-635s-aaab	https://nginx.org/en/security_advisories.html	34.0.2
2024-10-08T04:28:00.326015+00:00	Nginx Importer	Affected by	VCID-q6hd-xazy-aaaj	https://nginx.org/en/security_advisories.html	34.0.2
2024-09-23T04:09:42.425205+00:00	Nginx Importer	Affected by	VCID-c9xc-nm4d-aaar	https://nginx.org/en/security_advisories.html	34.0.1
2024-09-23T04:09:25.074648+00:00	Nginx Importer	Affected by	VCID-2gtf-635s-aaab	https://nginx.org/en/security_advisories.html	34.0.1
2024-09-23T04:09:21.053707+00:00	Nginx Importer	Affected by	VCID-q6hd-xazy-aaaj	https://nginx.org/en/security_advisories.html	34.0.1
2024-04-24T06:34:04.217052+00:00	Nginx Importer	Affected by	VCID-2gtf-635s-aaab	None	34.0.0rc4
2024-04-24T06:34:00.116706+00:00	Nginx Importer	Affected by	VCID-2gtf-635s-aaab	https://nginx.org/en/security_advisories.html	34.0.0rc4
2024-04-24T06:33:52.478806+00:00	Nginx Importer	Affected by	VCID-q6hd-xazy-aaaj	https://nginx.org/en/security_advisories.html	34.0.0rc4
2024-04-24T06:33:44.552739+00:00	Nginx Importer	Affected by	VCID-q6hd-xazy-aaaj	None	34.0.0rc4
2024-01-10T09:03:00.602004+00:00	Nginx Importer	Affected by	VCID-2gtf-635s-aaab	None	34.0.0rc2
2024-01-10T09:02:56.078003+00:00	Nginx Importer	Affected by	VCID-2gtf-635s-aaab	https://nginx.org/en/security_advisories.html	34.0.0rc2
2024-01-10T09:02:47.297828+00:00	Nginx Importer	Affected by	VCID-q6hd-xazy-aaaj	https://nginx.org/en/security_advisories.html	34.0.0rc2
2024-01-10T09:02:38.405264+00:00	Nginx Importer	Affected by	VCID-q6hd-xazy-aaaj	None	34.0.0rc2
2024-01-04T01:48:11.742425+00:00	Nginx Importer	Affected by	VCID-2gtf-635s-aaab	None	34.0.0rc1
2024-01-04T01:48:07.418742+00:00	Nginx Importer	Affected by	VCID-2gtf-635s-aaab	https://nginx.org/en/security_advisories.html	34.0.0rc1
2024-01-04T01:47:58.875913+00:00	Nginx Importer	Affected by	VCID-q6hd-xazy-aaaj	https://nginx.org/en/security_advisories.html	34.0.0rc1
2024-01-04T01:47:50.111825+00:00	Nginx Importer	Affected by	VCID-q6hd-xazy-aaaj	None	34.0.0rc1