1. Home
  2. Security Advisories
  3. SUSE
  4. SUSE-SU-2019:2309-1

[SUSE-SU-2019:2309-1] Security update for nginx

Severity Important
CVEs 6
Info References Vulnerabilities

Security update for nginx

This update for nginx fixes the following issues:

Security issues fixed:

  • CVE-2019-9511: Fixed a denial of service by manipulating the window size and stream prioritization (bsc#1145579).
  • CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580).
  • CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582).
  • CVE-2018-16845: Fixed denial of service and memory disclosure via mp4 module (bsc#1115015).
  • CVE-2018-16843: Fixed excessive memory consumption in HTTP/2 implementation (bsc#1115022).
  • CVE-2018-16844: Fixed excessive CPU usage via flaw in HTTP/2 implementation (bsc#1115025).
ID
SUSE-SU-2019:2309-1
Severity
important
URL
https://www.suse.com/support/update/announcement/2019/suse-su-20192309-1/
Published
2019-09-05T14:00:22
(5 years ago)
Modified
2019-09-05T14:00:22
(5 years ago)
Rights
Copyright 2024 SUSE LLC. All rights reserved.
Other Advisories
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date