[FREEBSD:87679FCB-BE60-11E9-9051-4C72B94353B5] NGINX -- Multiple vulnerabilities

Severity High

Affected Packages 2

CVEs 3

NGINX Team reports:

  Several security issues were identified in nginx HTTP/2
    implementation which might cause excessive memory consumption
    and CPU usage (CVE-2019-9511, CVE-2019-9513, CVE-2019-9516).
    The issues affect nginx compiled with the ngx_http_v2_module (not
    compiled by default) if the http2 option of the listen directive
    is used in a configuration file.

Package	Affected Version
pkg:freebsd/nginx-devel	< 1.17.3
pkg:freebsd/nginx	< 1.16.1,2

ID

FREEBSD:87679FCB-BE60-11E9-9051-4C72B94353B5

Severity

high

Severity from

CVE-2019-9511

URL

http://vuxml.freebsd.org/freebsd/87679fcb-be60-11e9-9051-4c72b94353b5.html

Published

2019-08-13T00:00:00
(5 years ago)

Modified

2019-08-14T00:00:00
(5 years ago)

Rights

FreeBSD VuXML Security Team

Other Advisories

Source	# ID	Name	URL
FreeBSD VuXML			http://nginx.org/en/security_advisories.html

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch	Patch / Fix
Affected	pkg:freebsd/nginx-devel		nginx-devel	< 1.17.3
Affected	pkg:freebsd/nginx		nginx	< 1.16.1,2

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date