1. Home
  2. Packages
  3. nginx
  4. nginx

pkg:nginx/nginx

Type nginx
Name nginx

Known advisories, vulnerabilities and fixes for nginx package.

Major 12
Medium 20
Minor 1
Low 5
Type Version Distribution # CVEs # Advisory ID Title Severity Published
Affected >= 0.1.0, <= 0.8.14 CVE-2009-2629
nginx NGINX:CVE-2009-2629 Buffer underflow vulnerability major 2009-09-15T22:30:00
(15 years ago)
Unaffected >= 0.8.15 >= 0.7.62 >= 0.6.39 >= 0.5.38 CVE-2009-2629
nginx NGINX:CVE-2009-2629 Buffer underflow vulnerability major 2009-09-15T22:30:00
(15 years ago)
Affected >= 0.1.0, <= 0.8.22 CVE-2009-3555
nginx NGINX:CVE-2009-3555 The renegotiation vulnerability in SSL protocol major 2009-11-09T17:30:00
(15 years ago)
Unaffected >= 0.8.23 >= 0.7.64 CVE-2009-3555
nginx NGINX:CVE-2009-3555 The renegotiation vulnerability in SSL protocol major 2009-11-09T17:30:00
(15 years ago)
Affected >= 0.1.0, <= 0.8.13 CVE-2009-3896
nginx NGINX:CVE-2009-3896 Null pointer dereference vulnerability major 2009-11-24T17:30:00
(15 years ago)
Unaffected >= 0.8.14 >= 0.7.62 >= 0.6.39 >= 0.5.38 CVE-2009-3896
nginx NGINX:CVE-2009-3896 Null pointer dereference vulnerability major 2009-11-24T17:30:00
(15 years ago)
Affected >= 0.1.0, <= 0.8.16 CVE-2009-3898
nginx NGINX:CVE-2009-3898 Directory traversal vulnerability minor 2009-11-24T17:30:00
(15 years ago)
Unaffected >= 0.8.17 >= 0.7.63 CVE-2009-3898
nginx NGINX:CVE-2009-3898 Directory traversal vulnerability minor 2009-11-24T17:30:00
(15 years ago)
Affected >= 0.7.52, <= 0.8.39 CVE-2010-2263
nginx NGINX:CVE-2010-2263 Vulnerabilities with Windows file default stream major 2010-06-15T14:04:24
(14 years ago)
Unaffected >= 0.8.40 >= 0.7.66 CVE-2010-2263
nginx NGINX:CVE-2010-2263 Vulnerabilities with Windows file default stream major 2010-06-15T14:04:24
(14 years ago)
Affected >= 0.7.52, <= 0.8.40 CVE-2010-2266
nginx NGINX:CVE-2010-2266 Vulnerabilities with invalid UTF-8 sequence on Windows major 2010-06-15T14:04:24
(14 years ago)
Unaffected >= 0.8.41 >= 0.7.67 CVE-2010-2266
nginx NGINX:CVE-2010-2266 Vulnerabilities with invalid UTF-8 sequence on Windows major 2010-06-15T14:04:24
(14 years ago)
Affected >= 0.6.18, <= 1.1.7 CVE-2011-4315
nginx NGINX:CVE-2011-4315 Buffer overflow in resolver medium 2011-12-08T20:55:01
(12 years ago)
Unaffected >= 1.1.8 >= 1.0.10 CVE-2011-4315
nginx NGINX:CVE-2011-4315 Buffer overflow in resolver medium 2011-12-08T20:55:01
(12 years ago)
Affected >= 0.7.52, <= 1.3.0 CVE-2011-4963
nginx NGINX:CVE-2011-4963 Vulnerabilities with Windows directory aliases medium 2012-07-26T19:55:00
(12 years ago)
Unaffected >= 1.3.1 >= 1.2.1 CVE-2011-4963
nginx NGINX:CVE-2011-4963 Vulnerabilities with Windows directory aliases medium 2012-07-26T19:55:00
(12 years ago)
Affected >= 0.1.0, <= 1.1.16 CVE-2012-1180
nginx NGINX:CVE-2012-1180 Memory disclosure with specially crafted backend responses major 2012-04-17T21:55:01
(12 years ago)
Unaffected >= 1.1.17 >= 1.0.14 CVE-2012-1180
nginx NGINX:CVE-2012-1180 Memory disclosure with specially crafted backend responses major 2012-04-17T21:55:01
(12 years ago)
Affected >= 1.1.3, <= 1.1.18 >= 1.0.7, <= 1.0.14 CVE-2012-2089
nginx NGINX:CVE-2012-2089 Buffer overflow in the ngx_http_mp4_module major 2012-04-17T21:55:01
(12 years ago)
Unaffected >= 1.1.19 >= 1.0.15 CVE-2012-2089
nginx NGINX:CVE-2012-2089 Buffer overflow in the ngx_http_mp4_module major 2012-04-17T21:55:01
(12 years ago)
Affected >= 1.3.9, <= 1.4.0 CVE-2013-2028
nginx NGINX:CVE-2013-2028 Stack-based buffer overflow with specially crafted request major 2013-07-20T03:37:20
(11 years ago)
Unaffected >= 1.5.0 >= 1.4.1 CVE-2013-2028
nginx NGINX:CVE-2013-2028 Stack-based buffer overflow with specially crafted request major 2013-07-20T03:37:20
(11 years ago)
Affected >= 1.1.4, <= 1.2.8 >= 1.3.9, <= 1.4.0 CVE-2013-2070
nginx NGINX:CVE-2013-2070 Memory disclosure with specially crafted HTTP backend responses medium 2013-07-20T03:37:25
(11 years ago)
Unaffected >= 1.5.0 >= 1.4.1 >= 1.2.9 CVE-2013-2070
nginx NGINX:CVE-2013-2070 Memory disclosure with specially crafted HTTP backend responses medium 2013-07-20T03:37:25
(11 years ago)
Affected >= 0.8.41, <= 1.5.6 CVE-2013-4547
nginx NGINX:CVE-2013-4547 Request line parsing vulnerability medium 2013-11-23T18:55:04
(10 years ago)
Unaffected >= 1.5.7 >= 1.4.4 CVE-2013-4547
nginx NGINX:CVE-2013-4547 Request line parsing vulnerability medium 2013-11-23T18:55:04
(10 years ago)
Affected >= 1.5.10 CVE-2014-0088
nginx NGINX:CVE-2014-0088 SPDY memory corruption major 2014-04-29T14:38:49
(10 years ago)
Unaffected >= 1.5.11 CVE-2014-0088
nginx NGINX:CVE-2014-0088 SPDY memory corruption major 2014-04-29T14:38:49
(10 years ago)
Affected >= 1.3.15, <= 1.5.11 CVE-2014-0133
nginx NGINX:CVE-2014-0133 SPDY heap buffer overflow major 2014-03-28T15:55:08
(10 years ago)
Unaffected >= 1.5.12 >= 1.4.7 CVE-2014-0133
nginx NGINX:CVE-2014-0133 SPDY heap buffer overflow major 2014-03-28T15:55:08
(10 years ago)
Affected >= 1.5.6, <= 1.7.3 CVE-2014-3556
nginx NGINX:CVE-2014-3556 STARTTLS command injection medium 2014-12-29T20:59:03
(9 years ago)
Unaffected >= 1.7.4 >= 1.6.1 CVE-2014-3556
nginx NGINX:CVE-2014-3556 STARTTLS command injection medium 2014-12-29T20:59:03
(9 years ago)
Affected >= 0.5.6, <= 1.7.4 CVE-2014-3616
nginx NGINX:CVE-2014-3616 SSL session reuse vulnerability medium 2014-12-08T11:59:03
(9 years ago)
Unaffected >= 1.7.5 >= 1.6.2 CVE-2014-3616
nginx NGINX:CVE-2014-3616 SSL session reuse vulnerability medium 2014-12-08T11:59:03
(9 years ago)
Affected >= 0.6.18, <= 1.9.9 CVE-2016-0742
nginx NGINX:CVE-2016-0742 Invalid pointer dereference in resolver medium 2016-02-15T19:59:00
(8 years ago)
Unaffected >= 1.9.10 >= 1.8.1 CVE-2016-0742
nginx NGINX:CVE-2016-0742 Invalid pointer dereference in resolver medium 2016-02-15T19:59:00
(8 years ago)
Affected >= 0.6.18, <= 1.9.9 CVE-2016-0746
nginx NGINX:CVE-2016-0746 Use-after-free during CNAME response processing in resolver medium 2016-02-15T19:59:01
(8 years ago)
Unaffected >= 1.9.10 >= 1.8.1 CVE-2016-0746
nginx NGINX:CVE-2016-0746 Use-after-free during CNAME response processing in resolver medium 2016-02-15T19:59:01
(8 years ago)
Affected >= 0.6.18, <= 1.9.9 CVE-2016-0747
nginx NGINX:CVE-2016-0747 Insufficient limits of CNAME resolution in resolver medium 2016-02-15T19:59:02
(8 years ago)
Unaffected >= 1.9.10 >= 1.8.1 CVE-2016-0747
nginx NGINX:CVE-2016-0747 Insufficient limits of CNAME resolution in resolver medium 2016-02-15T19:59:02
(8 years ago)
Affected >= 1.3.9, <= 1.11.0 CVE-2016-4450
nginx NGINX:CVE-2016-4450 NULL pointer dereference while writing client request body medium 2016-06-07T14:06:14
(8 years ago)
Unaffected >= 1.11.1 >= 1.10.1 CVE-2016-4450
nginx NGINX:CVE-2016-4450 NULL pointer dereference while writing client request body medium 2016-06-07T14:06:14
(8 years ago)
Affected >= 0.5.6, <= 1.13.2 CVE-2017-7529
nginx NGINX:CVE-2017-7529 Integer overflow in the range filter medium 2017-07-13T13:29:00
(7 years ago)
Unaffected >= 1.13.3 >= 1.12.1 CVE-2017-7529
nginx NGINX:CVE-2017-7529 Integer overflow in the range filter medium 2017-07-13T13:29:00
(7 years ago)
Affected >= 1.9.5, <= 1.15.5 CVE-2018-16843
nginx NGINX:CVE-2018-16843 Excessive memory usage in HTTP/2 low 2018-11-07T14:29:00
(5 years ago)
Unaffected >= 1.15.6 >= 1.14.1 CVE-2018-16843
nginx NGINX:CVE-2018-16843 Excessive memory usage in HTTP/2 low 2018-11-07T14:29:00
(5 years ago)
Affected >= 1.9.5, <= 1.15.5 CVE-2018-16844
nginx NGINX:CVE-2018-16844 Excessive CPU usage in HTTP/2 low 2018-11-07T14:29:00
(5 years ago)
Unaffected >= 1.15.6 >= 1.14.1 CVE-2018-16844
nginx NGINX:CVE-2018-16844 Excessive CPU usage in HTTP/2 low 2018-11-07T14:29:00
(5 years ago)
Affected >= 1.1.3, <= 1.15.5 >= 1.0.7, <= 1.0.15 CVE-2018-16845
nginx NGINX:CVE-2018-16845 Memory disclosure in the ngx_http_mp4_module medium 2018-11-07T14:29:00
(5 years ago)
Unaffected >= 1.15.6 >= 1.14.1 CVE-2018-16845
nginx NGINX:CVE-2018-16845 Memory disclosure in the ngx_http_mp4_module medium 2018-11-07T14:29:00
(5 years ago)
Affected >= 1.9.5, <= 1.17.2 CVE-2019-9511
nginx NGINX:CVE-2019-9511 Excessive CPU usage in HTTP/2 with small window updates medium 2019-08-13T21:15:12
(5 years ago)
Unaffected >= 1.17.3 >= 1.16.1 CVE-2019-9511
nginx NGINX:CVE-2019-9511 Excessive CPU usage in HTTP/2 with small window updates medium 2019-08-13T21:15:12
(5 years ago)
Affected >= 1.9.5, <= 1.17.2 CVE-2019-9513
nginx NGINX:CVE-2019-9513 Excessive CPU usage in HTTP/2 with priority changes low 2019-08-13T21:15:12
(5 years ago)
Unaffected >= 1.17.3 >= 1.16.1 CVE-2019-9513
nginx NGINX:CVE-2019-9513 Excessive CPU usage in HTTP/2 with priority changes low 2019-08-13T21:15:12
(5 years ago)
Affected >= 1.9.5, <= 1.17.2 CVE-2019-9516
nginx NGINX:CVE-2019-9516 Excessive memory usage in HTTP/2 with zero length headers low 2019-08-13T21:15:12
(5 years ago)
Unaffected >= 1.17.3 >= 1.16.1 CVE-2019-9516
nginx NGINX:CVE-2019-9516 Excessive memory usage in HTTP/2 with zero length headers low 2019-08-13T21:15:12
(5 years ago)
Affected >= 0.6.18, <= 1.20.0 CVE-2021-23017
nginx NGINX:CVE-2021-23017 1-byte memory overwrite in resolver medium 2021-06-01T13:15:07
(3 years ago)
Unaffected >= 1.21.0 >= 1.20.1 CVE-2021-23017
nginx NGINX:CVE-2021-23017 1-byte memory overwrite in resolver medium 2021-06-01T13:15:07
(3 years ago)
Affected >= 1.1.3, <= 1.23.1 >= 1.0.7, <= 1.0.15 CVE-2022-41741
nginx NGINX:CVE-2022-41741 Memory corruption in the ngx_http_mp4_module medium 2022-10-19T22:15:12
(22 months ago)
Unaffected >= 1.23.2 >= 1.22.1 CVE-2022-41741
nginx NGINX:CVE-2022-41741 Memory corruption in the ngx_http_mp4_module medium 2022-10-19T22:15:12
(22 months ago)
Affected >= 1.1.3, <= 1.23.1 >= 1.0.7, <= 1.0.15 CVE-2022-41742
nginx NGINX:CVE-2022-41742 Memory disclosure in the ngx_http_mp4_module medium 2022-10-19T22:15:12
(22 months ago)
Unaffected >= 1.23.2 >= 1.22.1 CVE-2022-41742
nginx NGINX:CVE-2022-41742 Memory disclosure in the ngx_http_mp4_module medium 2022-10-19T22:15:12
(22 months ago)
Affected >= 1.25.3 CVE-2024-24989
nginx NGINX:CVE-2024-24989 NULL pointer dereference in HTTP/3 major 2024-02-14T17:15:15
(6 months ago)
Unaffected >= 1.25.4 CVE-2024-24989
nginx NGINX:CVE-2024-24989 NULL pointer dereference in HTTP/3 major 2024-02-14T17:15:15
(6 months ago)
Affected >= 1.25.0, <= 1.25.3 CVE-2024-24990
nginx NGINX:CVE-2024-24990 Use-after-free in HTTP/3 major 2024-02-14T17:15:15
(6 months ago)
Unaffected >= 1.25.4 CVE-2024-24990
nginx NGINX:CVE-2024-24990 Use-after-free in HTTP/3 major 2024-02-14T17:15:15
(6 months ago)
Affected >= 1.25.0, <= 1.25.5 >= 1.26.0 CVE-2024-31079
nginx NGINX:CVE-2024-31079 Stack overflow and use-after-free in HTTP/3 medium 2024-05-29T16:15:09
(3 months ago)
Unaffected >= 1.27.0 >= 1.26.1 CVE-2024-31079
nginx NGINX:CVE-2024-31079 Stack overflow and use-after-free in HTTP/3 medium 2024-05-29T16:15:09
(3 months ago)
Affected >= 1.25.0, <= 1.25.5 >= 1.26.0 CVE-2024-32760
nginx NGINX:CVE-2024-32760 Buffer overwrite in HTTP/3 medium 2024-05-29T16:15:10
(3 months ago)
Unaffected >= 1.27.0 >= 1.26.1 CVE-2024-32760
nginx NGINX:CVE-2024-32760 Buffer overwrite in HTTP/3 medium 2024-05-29T16:15:10
(3 months ago)
Affected >= 1.25.0, <= 1.25.5 >= 1.26.0 CVE-2024-34161
nginx NGINX:CVE-2024-34161 Memory disclosure in HTTP/3 medium 2024-05-29T16:15:10
(3 months ago)
Unaffected >= 1.27.0 >= 1.26.1 CVE-2024-34161
nginx NGINX:CVE-2024-34161 Memory disclosure in HTTP/3 medium 2024-05-29T16:15:10
(3 months ago)
Affected >= 1.25.0, <= 1.25.5 >= 1.26.0 CVE-2024-35200
nginx NGINX:CVE-2024-35200 NULL pointer dereference in HTTP/3 medium 2024-05-29T16:15:10
(3 months ago)
Unaffected >= 1.27.0 >= 1.26.1 CVE-2024-35200
nginx NGINX:CVE-2024-35200 NULL pointer dereference in HTTP/3 medium 2024-05-29T16:15:10
(3 months ago)
Affected >= 1.5.13, <= 1.27.0 CVE-2024-7347
nginx NGINX:CVE-2024-7347 Buffer overread in the ngx_http_mp4_module low 2024-08-14T15:15:31
(3 weeks ago)
Unaffected >= 1.27.1 >= 1.26.2 CVE-2024-7347
nginx NGINX:CVE-2024-7347 Buffer overread in the ngx_http_mp4_module low 2024-08-14T15:15:31
(3 weeks ago)