Most recent entries from all

bdu:2019-00984

Withdrawn: BELL-CVE-2018-16845 — CVE-2018-16845 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2018-avi-535 — De multiples vulnérabilités ont été découvertes dans Nginx. Elles permettent à un attaquant de provoquer un déni de ser…

certfr-2018-avi-535

Withdrawn: CLEANSTART-2026-AF45008 — When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumptio…

Withdrawn by the publisher.

Affected: CleanStart: nginx

Multiple security vulnerabilities affect the nginx package. When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. See references for individual vulnerability details.

cnvd-2018-22807

EUVD-2026-68347

fkie_cve-2018-16845

nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an attacker to cause infinite loop in a worker process, cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted mp4 file. The issue only affects nginx if it is built with the ngx_http_mp4_module (the module is not built by default) and the .mp4. directive is used in the configuration file. Further, the attack is only possible if an attacker is able to trigger processing of a specially crafted mp4 file with the ngx_http_mp4_module.

GHSA-vq5f-vpgw-9vcp

gsd-2018-16845

openSUSE-SU-2019:0195-1 — Security update for nginx

Security update for nginx

RHSA-2018:3652 — Red Hat Security Advisory: rh-nginx18-nginx security update

nginx: Denial of service and memory disclosure via mp4 module

SUSE-SU-2019:0334-1 — Security update for nginx

Security update for nginx

UBUNTU-CVE-2018-16845

Affected: Ubuntu:14.04:LTS: nginx, Ubuntu:16.04:LTS: nginx, Ubuntu:18.04:LTS: nginx