Поиск уязвимостей
Количество 51
Количество 51
CVE-2019-9511
HTTP/2 Server Denial of Service Vulnerability
CVE-2019-9511
Some HTTP/2 implementations are vulnerable to window size manipulation ...
GHSA-vq5f-vpgw-9vcp
nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an attacker to cause infinite loop in a worker process, cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted mp4 file. The issue only affects nginx if it is built with the ngx_http_mp4_module (the module is not built by default) and the .mp4. directive is used in the configuration file. Further, the attack is only possible if an attacker is able to trigger processing of a specially crafted mp4 file with the ngx_http_mp4_module.
BDU:2019-00984
Уязвимость модуля ngx_http_mp4_module сервера nginx, позволяющая нарушителю вызвать отказ в обслуживании или раскрыть защищаемую информацию
GHSA-89fc-749h-w2fj
Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.
BDU:2019-03782
Уязвимость реализации сетевого протокола HTTP/2 веб-сервера Apache HTTP Server, связанная с неконтролируемым расходом ресурса, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-02994
Уязвимость реализации сетевого протокола HTTP/2 операционных систем Windows, сервера nginx, программной платформы Node.js, позволяющая нарушителю вызвать отказ в обслуживании
openSUSE-SU-2019:0195-1
Security update for nginx
SUSE-SU-2019:0334-1
Security update for nginx
openSUSE-SU-2019:2234-1
Security update for nghttp2
openSUSE-SU-2019:2232-1
Security update for nghttp2
SUSE-SU-2019:2473-1
Security update for nghttp2
ELSA-2019-2692
ELSA-2019-2692: nghttp2 security update (IMPORTANT)
openSUSE-SU-2019:2264-1
Security update for nginx
SUSE-SU-2019:2559-1
Security update for nginx
RLSA-2019:2799
Important: nginx:1.14 security update
ELSA-2019-2799
ELSA-2019-2799: nginx:1.14 security update (IMPORTANT)
ALT-PU-2018-2601
ALT-PU-2018-2601: package `nginx` update to version 1.14.1-alt1
SUSE-SU-2021:0932-1
Security update for nghttp2
ALT-PU-2019-2601
ALT-PU-2019-2601: package `libnghttp2` update to version 1.39.2-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2019-9511 HTTP/2 Server Denial of Service Vulnerability | CVSS3: 7.5 | 60% Средний | около 7 лет назад |
| CVE-2019-9511 Some HTTP/2 implementations are vulnerable to window size manipulation ... | CVSS3: 7.5 | 60% Средний | около 7 лет назад |
| GHSA-vq5f-vpgw-9vcp nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an attacker to cause infinite loop in a worker process, cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted mp4 file. The issue only affects nginx if it is built with the ngx_http_mp4_module (the module is not built by default) and the .mp4. directive is used in the configuration file. Further, the attack is only possible if an attacker is able to trigger processing of a specially crafted mp4 file with the ngx_http_mp4_module. | CVSS3: 6.1 | 10% Низкий | больше 4 лет назад |
 | BDU:2019-00984 Уязвимость модуля ngx_http_mp4_module сервера nginx, позволяющая нарушителю вызвать отказ в обслуживании или раскрыть защищаемую информацию | CVSS3: 5.4 | 10% Низкий | около 8 лет назад |
| GHSA-89fc-749h-w2fj Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both. | CVSS3: 7.5 | 60% Средний | больше 4 лет назад |
| BDU:2019-03782 Уязвимость реализации сетевого протокола HTTP/2 веб-сервера Apache HTTP Server, связанная с неконтролируемым расходом ресурса, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 60% Средний | больше 7 лет назад |
| BDU:2019-02994 Уязвимость реализации сетевого протокола HTTP/2 операционных систем Windows, сервера nginx, программной платформы Node.js, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 60% Средний | около 7 лет назад |
 | openSUSE-SU-2019:0195-1 Security update for nginx | больше 7 лет назад | ||
| SUSE-SU-2019:0334-1 Security update for nginx | больше 7 лет назад | ||
| openSUSE-SU-2019:2234-1 Security update for nghttp2 | около 7 лет назад | ||
| openSUSE-SU-2019:2232-1 Security update for nghttp2 | около 7 лет назад | ||
| SUSE-SU-2019:2473-1 Security update for nghttp2 | около 7 лет назад | ||
| ELSA-2019-2692 ELSA-2019-2692: nghttp2 security update (IMPORTANT) | около 7 лет назад | ||
| openSUSE-SU-2019:2264-1 Security update for nginx | около 7 лет назад | ||
| SUSE-SU-2019:2559-1 Security update for nginx | около 7 лет назад | ||
 | RLSA-2019:2799 Important: nginx:1.14 security update | около 7 лет назад | ||
| ELSA-2019-2799 ELSA-2019-2799: nginx:1.14 security update (IMPORTANT) | около 7 лет назад | ||
| ALT-PU-2018-2601 ALT-PU-2018-2601: package `nginx` update to version 1.14.1-alt1 | CVSS3: 7.5 | около 8 лет назад | |
| SUSE-SU-2021:0932-1 Security update for nghttp2 | больше 5 лет назад | ||
| ALT-PU-2019-2601 ALT-PU-2019-2601: package `libnghttp2` update to version 1.39.2-alt1 | CVSS3: 7.5 | около 7 лет назад |
Уязвимостей на страницу