Every CVE Search/ Get API key

CVE-2024-7347

NGINX MP4 module vulnerability

5.7 MediumFix available

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngx_http_mp4_module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted mp4 file with the ngx_http_mp4_module.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.32%Up 0.3 points since Aug 15, 2024
90%50%10%1%

What each source reports

CVE List Score used 5.7

NGINX MP4 module vulnerability

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngx_http_mp4_module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted mp4 file with the ngx_http_mp4_module.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Record
CVE-2024-7347
CVSS 4.0
5.7 MediumCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-126
Updated
2026-11-02
EUVDEUVD-2024-48285 5.7

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngx_http_mp4_module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted mp4 file with the ngx_http_mp4_module.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Record
EUVD-2024-48285
CVSS 4.0
5.7 MediumCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-3r23-64c4-mj87 5.7

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might...

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngx_http_mp4_module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted mp4 file with the ngx_http_mp4_module.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Record
GHSA-3r23-64c4-mj87
CVSS 4.0
5.7 MediumCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-125, CWE-126
Updated
2026-11-02
NVD 5.7

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngx_http_mp4_module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted mp4 file with the ngx_http_mp4_module.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Record
CVE-2024-7347
CVSS 4.0
5.7 MediumCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-126, CWE-125
Updated
2026-11-02
OSVALPINE-CVE-2024-7347 4.7

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngx_http_mp4_module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted mp4 file with the ngx_http_mp4_module.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Record
ALPINE-CVE-2024-7347
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-47781 4.7

CVE-2024-7347 affecting package nginx for versions less than 1.22.1-12

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngx_http_mp4_module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted mp4 file with the ngx_http_mp4_module.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Record
AZL-47781
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 36 moreShow less
OSVAZL-47789 4.7

CVE-2024-7347 affecting package nginx for versions less than 1.25.4-2

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngx_http_mp4_module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted mp4 file with the ngx_http_mp4_module.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Record
AZL-47789
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2024-7347 4.7
Record
BELL-CVE-2024-7347
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 4.7

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngx_http_mp4_module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted mp4 file with the ngx_http_mp4_module.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Record
CVE-2024-7347
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2024-7347 4.7

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngx_http_mp4_module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted mp4 file with the ngx_http_mp4_module.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Record
DEBIAN-CVE-2024-7347
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-2065 4.7

nginx security update

NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server.

Security Fix(es):

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngx_http_mp4_module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted mp4 file with the ngx_http_mp4_module.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2024-7347)

Record
OESA-2024-2065
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-2086 4.7

nginx security update

NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server.

Security Fix(es):

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngx_http_mp4_module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted mp4 file with the ngx_http_mp4_module.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2024-7347)

Record
OESA-2024-2086
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-2087 4.7

nginx security update

NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server.

Security Fix(es):

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngx_http_mp4_module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted mp4 file with the ngx_http_mp4_module.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2024-7347)

Record
OESA-2024-2087
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-2088 4.7

nginx security update

NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server.

Security Fix(es):

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngx_http_mp4_module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted mp4 file with the ngx_http_mp4_module.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2024-7347)

Record
OESA-2024-2088
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-2089 4.7

nginx security update

NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server.

Security Fix(es):

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngx_http_mp4_module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted mp4 file with the ngx_http_mp4_module.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2024-7347)

Record
OESA-2024-2089
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:3261 4.7

Red Hat Security Advisory: nginx:1.22 security update

Record
RHSA-2025:3261
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:3262 4.7

Red Hat Security Advisory: nginx:1.24 security update

Record
RHSA-2025:3262
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:7402 7.8

Red Hat Security Advisory: nginx security update

Record
RHSA-2025:7402
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:7542 4.7

Red Hat Security Advisory: nginx:1.24 security update

Record
RHSA-2025:7542
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:7546 7.8

Red Hat Security Advisory: nginx security update

Record
RHSA-2025:7546
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:7548 4.7

Red Hat Security Advisory: nginx:1.22 security update

Record
RHSA-2025:7548
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:7549 4.7

Red Hat Security Advisory: nginx:1.22 security update

Record
RHSA-2025:7549
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:7619 7.8

Red Hat Security Advisory: nginx security update

Record
RHSA-2025:7619
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:3261 4.7

Moderate: nginx:1.22 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.

Security Fix(es):

  • nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:3261
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2025:3262 4.7

Moderate: nginx:1.24 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.

Security Fix(es):

  • nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:3262
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2025:7402 7.8

Moderate: nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.

Security Fix(es):

  • nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741)

  • nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742)

  • nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:7402
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-7347 5.7

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngx_http_mp4_module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted mp4 file with the ngx_http_mp4_module.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Record
UBUNTU-CVE-2024-7347
CVSS 4.0
5.7 MediumCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2025:3261 No score

Moderate: nginx:1.22 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.

Security Fix(es):

  • nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:3261
Updated
2026-11-02
OSVALSA-2025:3262 No score

Moderate: nginx:1.24 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.

Security Fix(es):

  • nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:3262
Updated
2026-11-02
OSVALSA-2025:7402 No score

Moderate: nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.

Security Fix(es):

  • nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741)
  • nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742)
  • nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:7402
Updated
2026-11-02
OSVBIT-nginx-2024-7347 No score

NGINX MP4 module vulnerability

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngx_http_mp4_module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted mp4 file with the ngx_http_mp4_module.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Record
BIT-nginx-2024-7347
Updated
2026-11-02
OSVBIT-nginx-gateway-2024-7347 No score

NGINX MP4 module vulnerability

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngx_http_mp4_module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted mp4 file with the ngx_http_mp4_module.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Record
BIT-nginx-gateway-2024-7347
Updated
2026-11-02
OSVCLSA-2024-1730478623 No score

Fix CVE(s): CVE-2023-7347, CVE-2024-7347

  • SECURITY UPDATE: mp4 module allows buffer underread and unordered chunks
    • debian/patches/CVE-2024-7347.patch: fix buffer underread while updating stsz atom and reject unordered chunks
    • CVE-2023-7347
Record
CLSA-2024-1730478623
Updated
2026-11-02
OSVCLSA-2024-1730479989 No score

Fix CVE(s): CVE-2023-7347, CVE-2024-7347

  • SECURITY UPDATE: mp4 module allows buffer underread and unordered chunks
    • debian/patches/CVE-2024-7347.patch: fix buffer underread while updating stsz atom and reject unordered chunks
    • CVE-2023-7347
Record
CLSA-2024-1730479989
Updated
2026-11-02
OSVCLSA-2025-1744633827 No score

nginx: Fix of CVE-2024-7347

  • CVE-2024-7347: fix MP4 stsc cropping: prevent overflow and buffer underread causing invalid seeks and possible segfault.
Record
CLSA-2025-1744633827
Updated
2026-11-02
OSVMGASA-2024-0286 No score

Nginx has been updated to the latest stable release to fix CVE

CVE-2024-7347: NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngx_http_mp4_module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted mp4 file with the ngx_http_mp4_module. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Record
MGASA-2024-0286
Updated
2026-11-02
OSVopenSUSE-SU-2024:14271-1 No score

nginx-1.27.1-1.1 on GA media

These are all security issues fixed in the nginx-1.27.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14271-1
Updated
2026-11-02
OSVSUSE-SU-2025:0282-1 No score

Security update for nginx

This update for nginx fixes the following issues:

  • CVE-2023-44487: Mitigate HTTP/2 Rapid Reset Attack (bsc#1216171)
  • CVE-2024-7347: Fixed worker crashes on special crafted mp4 files containing invalid chunk information (bsc#1229155)
Record
SUSE-SU-2025:0282-1
Updated
2026-11-02
OSVSUSE-SU-2025:0283-1 No score

Security update for nginx

This update for nginx fixes the following issues:

  • CVE-2023-44487: Mitigate HTTP/2 Rapid Reset Attack (bsc#1216171)
  • CVE-2024-7347: Fixed worker crashes on special crafted mp4 files containing invalid chunk information (bsc#1229155)
Record
SUSE-SU-2025:0283-1
Updated
2026-11-02
OSVUSN-7014-1 No score

nginx vulnerability

It was discovered that the nginx ngx_http_mp4 module incorrectly handled certain malformed mp4 files. In environments where the mp4 directive is in use, a remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of service.

Record
USN-7014-1
Updated
2026-11-02
OSVUSN-7014-2 No score

nginx vulnerability

USN-7014-1 fixed a vulnerability in nginx. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.

Original advisory details:

It was discovered that the nginx ngx_http_mp4 module incorrectly handled certain malformed mp4 files. In environments where the mp4 directive is in use, a remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of service.

Record
USN-7014-2
Updated
2026-11-02
OSVUSN-7014-3 No score

nginx vulnerability

USN-7014-1 fixed a vulnerability in nginx. This update provides the corresponding update for Ubuntu 14.04 LTS.

Original advisory details:

It was discovered that the nginx ngx_http_mp4 module incorrectly handled certain malformed mp4 files. In environments where the mp4 directive is in use, a remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of service.

Record
USN-7014-3
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
nginx
Alpine:v3.20
 before 1.26.2-r0
1.26.2-r0
nginx
Alpine:v3.21
 before 1.26.2-r0
1.26.2-r0
nginx
Alpine:v3.22
 before 1.26.2-r0
1.26.2-r0
nginx
Alpine:v3.23
 before 1.26.2-r0
1.26.2-r0
nginx
Alpine:v3.24
 before 1.26.2-r0
1.26.2-r0
nginx
AlmaLinux:9
 before 1:1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1
1:1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1
nginx-all-modules
AlmaLinux:9
 before 1:1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1
1:1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1
nginx-core
AlmaLinux:9
 before 1:1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1
1:1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1
nginx-filesystem
AlmaLinux:9
 before 1:1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1
1:1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1
nginx-mod-devel
AlmaLinux:9
 before 1:1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1
1:1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1
Show 274 moreShow less
Affected packages
PackageAffectedFixed
nginx-mod-http-image-filter
AlmaLinux:9
 before 1:1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1
1:1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1
nginx-mod-http-perl
AlmaLinux:9
 before 1:1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1
1:1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1
nginx-mod-http-xslt-filter
AlmaLinux:9
 before 1:1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1
1:1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1
nginx-mod-mail
AlmaLinux:9
 before 1:1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1
1:1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1
nginx-mod-stream
AlmaLinux:9
 before 1:1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1
1:1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1
nginx
AlmaLinux:9
 before 1:1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1
1:1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1
nginx-all-modules
AlmaLinux:9
 before 1:1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1
1:1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1
nginx-core
AlmaLinux:9
 before 1:1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1
1:1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1
nginx-filesystem
AlmaLinux:9
 before 1:1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1
1:1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1
nginx-mod-devel
AlmaLinux:9
 before 1:1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1
1:1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1
nginx-mod-http-image-filter
AlmaLinux:9
 before 1:1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1
1:1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1
nginx-mod-http-perl
AlmaLinux:9
 before 1:1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1
1:1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1
nginx-mod-http-xslt-filter
AlmaLinux:9
 before 1:1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1
1:1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1
nginx-mod-mail
AlmaLinux:9
 before 1:1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1
1:1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1
nginx-mod-stream
AlmaLinux:9
 before 1:1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1
1:1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1
nginx
AlmaLinux:9
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2.alma.1
2:1.20.1-22.el9_6.2.alma.1
nginx-all-modules
AlmaLinux:9
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2.alma.1
2:1.20.1-22.el9_6.2.alma.1
nginx-core
AlmaLinux:9
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2.alma.1
2:1.20.1-22.el9_6.2.alma.1
nginx-filesystem
AlmaLinux:9
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2.alma.1
2:1.20.1-22.el9_6.2.alma.1
nginx-mod-devel
AlmaLinux:9
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2.alma.1
2:1.20.1-22.el9_6.2.alma.1
nginx-mod-http-image-filter
AlmaLinux:9
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2.alma.1
2:1.20.1-22.el9_6.2.alma.1
nginx-mod-http-perl
AlmaLinux:9
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2.alma.1
2:1.20.1-22.el9_6.2.alma.1
nginx-mod-http-xslt-filter
AlmaLinux:9
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2.alma.1
2:1.20.1-22.el9_6.2.alma.1
nginx-mod-mail
AlmaLinux:9
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2.alma.1
2:1.20.1-22.el9_6.2.alma.1
nginx-mod-stream
AlmaLinux:9
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2.alma.1
2:1.20.1-22.el9_6.2.alma.1
nginx
Azure Linux:2
 before 1.22.1-12
1.22.1-12
nginx
Azure Linux:3
 before 1.25.4-2
1.25.4-2
nginx
Alpaquita:23
 1.22.1-r0 and later None known
nginx
Alpaquita:stream
 1.22.1-r0 up to 1.26.2-r0
1.26.2-r0
nginx
Bitnami
 1.5.13 up to 1.26.2, 1.27.0 up to 1.27.1
1.26.21.27.1
nginx-gateway
Bitnami
 1.5.13 up to 1.26.2, 1.27.0 up to 1.27.1
1.26.21.27.1
nginx
TuxCare:Ubuntu:16.04
From an advisory covering 2 CVEs
 before 1.10.3-0ubuntu0.16.04.8+tuxcare.els5
1.10.3-0ubuntu0.16.04.8+tuxcare.els5
nginx-common
TuxCare:Ubuntu:16.04
From an advisory covering 2 CVEs
 before 1.10.3-0ubuntu0.16.04.8+tuxcare.els5
1.10.3-0ubuntu0.16.04.8+tuxcare.els5
nginx-core
TuxCare:Ubuntu:16.04
From an advisory covering 2 CVEs
 before 1.10.3-0ubuntu0.16.04.8+tuxcare.els5
1.10.3-0ubuntu0.16.04.8+tuxcare.els5
nginx-doc
TuxCare:Ubuntu:16.04
From an advisory covering 2 CVEs
 before 1.10.3-0ubuntu0.16.04.8+tuxcare.els5
1.10.3-0ubuntu0.16.04.8+tuxcare.els5
nginx-extras
TuxCare:Ubuntu:16.04
From an advisory covering 2 CVEs
 before 1.10.3-0ubuntu0.16.04.8+tuxcare.els5
1.10.3-0ubuntu0.16.04.8+tuxcare.els5
nginx-full
TuxCare:Ubuntu:16.04
From an advisory covering 2 CVEs
 before 1.10.3-0ubuntu0.16.04.8+tuxcare.els5
1.10.3-0ubuntu0.16.04.8+tuxcare.els5
nginx-light
TuxCare:Ubuntu:16.04
From an advisory covering 2 CVEs
 before 1.10.3-0ubuntu0.16.04.8+tuxcare.els5
1.10.3-0ubuntu0.16.04.8+tuxcare.els5
libnginx-mod-http-auth-pam
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 1.14.0-0ubuntu1.11+tuxcare.els2
1.14.0-0ubuntu1.11+tuxcare.els2
libnginx-mod-http-cache-purge
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 1.14.0-0ubuntu1.11+tuxcare.els2
1.14.0-0ubuntu1.11+tuxcare.els2
libnginx-mod-http-dav-ext
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 1.14.0-0ubuntu1.11+tuxcare.els2
1.14.0-0ubuntu1.11+tuxcare.els2
libnginx-mod-http-echo
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 1.14.0-0ubuntu1.11+tuxcare.els2
1.14.0-0ubuntu1.11+tuxcare.els2
libnginx-mod-http-fancyindex
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 1.14.0-0ubuntu1.11+tuxcare.els2
1.14.0-0ubuntu1.11+tuxcare.els2
libnginx-mod-http-geoip
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 1.14.0-0ubuntu1.11+tuxcare.els2
1.14.0-0ubuntu1.11+tuxcare.els2
libnginx-mod-http-headers-more-filter
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 1.14.0-0ubuntu1.11+tuxcare.els2
1.14.0-0ubuntu1.11+tuxcare.els2
libnginx-mod-http-image-filter
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 1.14.0-0ubuntu1.11+tuxcare.els2
1.14.0-0ubuntu1.11+tuxcare.els2
libnginx-mod-http-lua
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 1.14.0-0ubuntu1.11+tuxcare.els2
1.14.0-0ubuntu1.11+tuxcare.els2
libnginx-mod-http-ndk
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 1.14.0-0ubuntu1.11+tuxcare.els2
1.14.0-0ubuntu1.11+tuxcare.els2
libnginx-mod-http-perl
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 1.14.0-0ubuntu1.11+tuxcare.els2
1.14.0-0ubuntu1.11+tuxcare.els2
libnginx-mod-http-subs-filter
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 1.14.0-0ubuntu1.11+tuxcare.els2
1.14.0-0ubuntu1.11+tuxcare.els2
libnginx-mod-http-uploadprogress
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 1.14.0-0ubuntu1.11+tuxcare.els2
1.14.0-0ubuntu1.11+tuxcare.els2
libnginx-mod-http-upstream-fair
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 1.14.0-0ubuntu1.11+tuxcare.els2
1.14.0-0ubuntu1.11+tuxcare.els2
libnginx-mod-http-xslt-filter
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 1.14.0-0ubuntu1.11+tuxcare.els2
1.14.0-0ubuntu1.11+tuxcare.els2
libnginx-mod-mail
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 1.14.0-0ubuntu1.11+tuxcare.els2
1.14.0-0ubuntu1.11+tuxcare.els2
libnginx-mod-nchan
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 1.14.0-0ubuntu1.11+tuxcare.els2
1.14.0-0ubuntu1.11+tuxcare.els2
libnginx-mod-rtmp
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 1.14.0-0ubuntu1.11+tuxcare.els2
1.14.0-0ubuntu1.11+tuxcare.els2
libnginx-mod-stream
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 1.14.0-0ubuntu1.11+tuxcare.els2
1.14.0-0ubuntu1.11+tuxcare.els2
nginx
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 1.14.0-0ubuntu1.11+tuxcare.els2
1.14.0-0ubuntu1.11+tuxcare.els2
nginx-common
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 1.14.0-0ubuntu1.11+tuxcare.els2
1.14.0-0ubuntu1.11+tuxcare.els2
nginx-core
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 1.14.0-0ubuntu1.11+tuxcare.els2
1.14.0-0ubuntu1.11+tuxcare.els2
nginx-doc
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 1.14.0-0ubuntu1.11+tuxcare.els2
1.14.0-0ubuntu1.11+tuxcare.els2
nginx-extras
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 1.14.0-0ubuntu1.11+tuxcare.els2
1.14.0-0ubuntu1.11+tuxcare.els2
nginx-full
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 1.14.0-0ubuntu1.11+tuxcare.els2
1.14.0-0ubuntu1.11+tuxcare.els2
nginx-light
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 1.14.0-0ubuntu1.11+tuxcare.els2
1.14.0-0ubuntu1.11+tuxcare.els2
nginx
TuxCare:AlmaLinux:9.2
 before 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els1
1:1.20.1-14.el9_2.1.alma.1.tuxcare.els1
nginx-all-modules
TuxCare:AlmaLinux:9.2
 before 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els1
1:1.20.1-14.el9_2.1.alma.1.tuxcare.els1
nginx-core
TuxCare:AlmaLinux:9.2
 before 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els1
1:1.20.1-14.el9_2.1.alma.1.tuxcare.els1
nginx-filesystem
TuxCare:AlmaLinux:9.2
 before 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els1
1:1.20.1-14.el9_2.1.alma.1.tuxcare.els1
nginx-mod-devel
TuxCare:AlmaLinux:9.2
 before 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els1
1:1.20.1-14.el9_2.1.alma.1.tuxcare.els1
nginx-mod-http-image-filter
TuxCare:AlmaLinux:9.2
 before 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els1
1:1.20.1-14.el9_2.1.alma.1.tuxcare.els1
nginx-mod-http-perl
TuxCare:AlmaLinux:9.2
 before 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els1
1:1.20.1-14.el9_2.1.alma.1.tuxcare.els1
nginx-mod-http-xslt-filter
TuxCare:AlmaLinux:9.2
 before 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els1
1:1.20.1-14.el9_2.1.alma.1.tuxcare.els1
nginx-mod-mail
TuxCare:AlmaLinux:9.2
 before 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els1
1:1.20.1-14.el9_2.1.alma.1.tuxcare.els1
nginx-mod-stream
TuxCare:AlmaLinux:9.2
 before 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els1
1:1.20.1-14.el9_2.1.alma.1.tuxcare.els1
nginx
Debian:12
 before 1.22.1-9+deb12u2, plus listed versions
1.22.1-91.22.1-9+deb12u1
1.22.1-9+deb12u2
nginx
Debian:13
 before 1.26.0-2
1.26.0-2
nginx
Debian:14
 before 1.26.0-2
1.26.0-2
nginx
Debian:11
From an advisory covering 2 CVEs
 before 1.18.0-6.1+deb11u4, plus listed versions
1.18.0-6.11.18.0-6.1+deb11u11.18.0-6.1+deb11u21.18.0-6.1+deb11u3
1.18.0-6.1+deb11u4
nginx
Mageia:9
 before 1.26.2-1.mga9
1.26.2-1.mga9
nginx
openEuler:22.03-LTS-SP4
 before 1.21.5-7.oe2203sp4
1.21.5-7.oe2203sp4
nginx
openEuler:20.03-LTS-SP4
 before 1.21.5-5.oe2003sp4
1.21.5-5.oe2003sp4
nginx
openEuler:22.03-LTS-SP1
 before 1.21.5-7.oe2203sp1
1.21.5-7.oe2203sp1
nginx
openEuler:24.03-LTS
 before 1.24.0-2.oe2403
1.24.0-2.oe2403
nginx
openEuler:22.03-LTS-SP3
 before 1.21.5-7.oe2203sp3
1.21.5-7.oe2203sp3
nginx
Red Hat:enterprise_linux:9::appstream
 before 1:1.22.1-8.module+el9.5.0+22953+b175c265.1
1:1.22.1-8.module+el9.5.0+22953+b175c265.1
nginx-all-modules
Red Hat:enterprise_linux:9::appstream
 before 1:1.22.1-8.module+el9.5.0+22953+b175c265.1
1:1.22.1-8.module+el9.5.0+22953+b175c265.1
nginx-core
Red Hat:enterprise_linux:9::appstream
 before 1:1.22.1-8.module+el9.5.0+22953+b175c265.1
1:1.22.1-8.module+el9.5.0+22953+b175c265.1
nginx-core-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:1.22.1-8.module+el9.5.0+22953+b175c265.1
1:1.22.1-8.module+el9.5.0+22953+b175c265.1
nginx-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:1.22.1-8.module+el9.5.0+22953+b175c265.1
1:1.22.1-8.module+el9.5.0+22953+b175c265.1
nginx-debugsource
Red Hat:enterprise_linux:9::appstream
 before 1:1.22.1-8.module+el9.5.0+22953+b175c265.1
1:1.22.1-8.module+el9.5.0+22953+b175c265.1
nginx-filesystem
Red Hat:enterprise_linux:9::appstream
 before 1:1.22.1-8.module+el9.5.0+22953+b175c265.1
1:1.22.1-8.module+el9.5.0+22953+b175c265.1
nginx-mod-devel
Red Hat:enterprise_linux:9::appstream
 before 1:1.22.1-8.module+el9.5.0+22953+b175c265.1
1:1.22.1-8.module+el9.5.0+22953+b175c265.1
nginx-mod-http-image-filter
Red Hat:enterprise_linux:9::appstream
 before 1:1.22.1-8.module+el9.5.0+22953+b175c265.1
1:1.22.1-8.module+el9.5.0+22953+b175c265.1
nginx-mod-http-image-filter-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:1.22.1-8.module+el9.5.0+22953+b175c265.1
1:1.22.1-8.module+el9.5.0+22953+b175c265.1
nginx-mod-http-perl
Red Hat:enterprise_linux:9::appstream
 before 1:1.22.1-8.module+el9.5.0+22953+b175c265.1
1:1.22.1-8.module+el9.5.0+22953+b175c265.1
nginx-mod-http-perl-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:1.22.1-8.module+el9.5.0+22953+b175c265.1
1:1.22.1-8.module+el9.5.0+22953+b175c265.1
nginx-mod-http-xslt-filter
Red Hat:enterprise_linux:9::appstream
 before 1:1.22.1-8.module+el9.5.0+22953+b175c265.1
1:1.22.1-8.module+el9.5.0+22953+b175c265.1
nginx-mod-http-xslt-filter-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:1.22.1-8.module+el9.5.0+22953+b175c265.1
1:1.22.1-8.module+el9.5.0+22953+b175c265.1
nginx-mod-mail
Red Hat:enterprise_linux:9::appstream
 before 1:1.22.1-8.module+el9.5.0+22953+b175c265.1
1:1.22.1-8.module+el9.5.0+22953+b175c265.1
nginx-mod-mail-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:1.22.1-8.module+el9.5.0+22953+b175c265.1
1:1.22.1-8.module+el9.5.0+22953+b175c265.1
nginx-mod-stream
Red Hat:enterprise_linux:9::appstream
 before 1:1.22.1-8.module+el9.5.0+22953+b175c265.1
1:1.22.1-8.module+el9.5.0+22953+b175c265.1
nginx-mod-stream-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:1.22.1-8.module+el9.5.0+22953+b175c265.1
1:1.22.1-8.module+el9.5.0+22953+b175c265.1
nginx
Red Hat:enterprise_linux:9::appstream
 before 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
nginx-all-modules
Red Hat:enterprise_linux:9::appstream
 before 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
nginx-core
Red Hat:enterprise_linux:9::appstream
 before 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
nginx-core-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
nginx-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
nginx-debugsource
Red Hat:enterprise_linux:9::appstream
 before 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
nginx-filesystem
Red Hat:enterprise_linux:9::appstream
 before 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
nginx-mod-devel
Red Hat:enterprise_linux:9::appstream
 before 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
nginx-mod-http-image-filter
Red Hat:enterprise_linux:9::appstream
 before 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
nginx-mod-http-image-filter-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
nginx-mod-http-perl
Red Hat:enterprise_linux:9::appstream
 before 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
nginx-mod-http-perl-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
nginx-mod-http-xslt-filter
Red Hat:enterprise_linux:9::appstream
 before 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
nginx-mod-http-xslt-filter-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
nginx-mod-mail
Red Hat:enterprise_linux:9::appstream
 before 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
nginx-mod-mail-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
nginx-mod-stream
Red Hat:enterprise_linux:9::appstream
 before 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
nginx-mod-stream-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1
nginx
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2
2:1.20.1-22.el9_6.2
nginx-all-modules
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2
2:1.20.1-22.el9_6.2
nginx-core
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2
2:1.20.1-22.el9_6.2
nginx-core-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2
2:1.20.1-22.el9_6.2
nginx-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2
2:1.20.1-22.el9_6.2
nginx-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2
2:1.20.1-22.el9_6.2
nginx-filesystem
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2
2:1.20.1-22.el9_6.2
nginx-mod-http-image-filter
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2
2:1.20.1-22.el9_6.2
nginx-mod-http-image-filter-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2
2:1.20.1-22.el9_6.2
nginx-mod-http-perl
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2
2:1.20.1-22.el9_6.2
nginx-mod-http-perl-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2
2:1.20.1-22.el9_6.2
nginx-mod-http-xslt-filter
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2
2:1.20.1-22.el9_6.2
nginx-mod-http-xslt-filter-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2
2:1.20.1-22.el9_6.2
nginx-mod-mail
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2
2:1.20.1-22.el9_6.2
nginx-mod-mail-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2
2:1.20.1-22.el9_6.2
nginx-mod-stream
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2
2:1.20.1-22.el9_6.2
nginx-mod-stream-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2
2:1.20.1-22.el9_6.2
nginx-core-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2
2:1.20.1-22.el9_6.2
nginx-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2
2:1.20.1-22.el9_6.2
nginx-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2
2:1.20.1-22.el9_6.2
nginx-mod-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2
2:1.20.1-22.el9_6.2
nginx-mod-http-image-filter-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2
2:1.20.1-22.el9_6.2
nginx-mod-http-perl-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2
2:1.20.1-22.el9_6.2
nginx-mod-http-xslt-filter-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2
2:1.20.1-22.el9_6.2
nginx-mod-mail-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2
2:1.20.1-22.el9_6.2
nginx-mod-stream-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2
2:1.20.1-22.el9_6.2
nginx
Red Hat:rhel_eus:9.4::appstream
 before 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
nginx-all-modules
Red Hat:rhel_eus:9.4::appstream
 before 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
nginx-core
Red Hat:rhel_eus:9.4::appstream
 before 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
nginx-core-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
nginx-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
nginx-debugsource
Red Hat:rhel_eus:9.4::appstream
 before 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
nginx-filesystem
Red Hat:rhel_eus:9.4::appstream
 before 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
nginx-mod-devel
Red Hat:rhel_eus:9.4::appstream
 before 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
nginx-mod-http-image-filter
Red Hat:rhel_eus:9.4::appstream
 before 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
nginx-mod-http-image-filter-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
nginx-mod-http-perl
Red Hat:rhel_eus:9.4::appstream
 before 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
nginx-mod-http-perl-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
nginx-mod-http-xslt-filter
Red Hat:rhel_eus:9.4::appstream
 before 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
nginx-mod-http-xslt-filter-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
nginx-mod-mail
Red Hat:rhel_eus:9.4::appstream
 before 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
nginx-mod-mail-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
nginx-mod-stream
Red Hat:rhel_eus:9.4::appstream
 before 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
nginx-mod-stream-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2
nginx
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-14.el9_2.3
1:1.20.1-14.el9_2.3
nginx-all-modules
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-14.el9_2.3
1:1.20.1-14.el9_2.3
nginx-core
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-14.el9_2.3
1:1.20.1-14.el9_2.3
nginx-core-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-14.el9_2.3
1:1.20.1-14.el9_2.3
nginx-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-14.el9_2.3
1:1.20.1-14.el9_2.3
nginx-debugsource
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-14.el9_2.3
1:1.20.1-14.el9_2.3
nginx-filesystem
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-14.el9_2.3
1:1.20.1-14.el9_2.3
nginx-mod-http-image-filter
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-14.el9_2.3
1:1.20.1-14.el9_2.3
nginx-mod-http-image-filter-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-14.el9_2.3
1:1.20.1-14.el9_2.3
nginx-mod-http-perl
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-14.el9_2.3
1:1.20.1-14.el9_2.3
nginx-mod-http-perl-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-14.el9_2.3
1:1.20.1-14.el9_2.3
nginx-mod-http-xslt-filter
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-14.el9_2.3
1:1.20.1-14.el9_2.3
nginx-mod-http-xslt-filter-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-14.el9_2.3
1:1.20.1-14.el9_2.3
nginx-mod-mail
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-14.el9_2.3
1:1.20.1-14.el9_2.3
nginx-mod-mail-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-14.el9_2.3
1:1.20.1-14.el9_2.3
nginx-mod-stream
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-14.el9_2.3
1:1.20.1-14.el9_2.3
nginx-mod-stream-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-14.el9_2.3
1:1.20.1-14.el9_2.3
nginx-core-debuginfo
Red Hat:rhel_eus:9.2::crb
From an advisory covering 3 CVEs
 before 1:1.20.1-14.el9_2.3
1:1.20.1-14.el9_2.3
nginx-debuginfo
Red Hat:rhel_eus:9.2::crb
From an advisory covering 3 CVEs
 before 1:1.20.1-14.el9_2.3
1:1.20.1-14.el9_2.3
nginx-debugsource
Red Hat:rhel_eus:9.2::crb
From an advisory covering 3 CVEs
 before 1:1.20.1-14.el9_2.3
1:1.20.1-14.el9_2.3
nginx-mod-devel
Red Hat:rhel_eus:9.2::crb
From an advisory covering 3 CVEs
 before 1:1.20.1-14.el9_2.3
1:1.20.1-14.el9_2.3
nginx-mod-http-image-filter-debuginfo
Red Hat:rhel_eus:9.2::crb
From an advisory covering 3 CVEs
 before 1:1.20.1-14.el9_2.3
1:1.20.1-14.el9_2.3
nginx-mod-http-perl-debuginfo
Red Hat:rhel_eus:9.2::crb
From an advisory covering 3 CVEs
 before 1:1.20.1-14.el9_2.3
1:1.20.1-14.el9_2.3
nginx-mod-http-xslt-filter-debuginfo
Red Hat:rhel_eus:9.2::crb
From an advisory covering 3 CVEs
 before 1:1.20.1-14.el9_2.3
1:1.20.1-14.el9_2.3
nginx-mod-mail-debuginfo
Red Hat:rhel_eus:9.2::crb
From an advisory covering 3 CVEs
 before 1:1.20.1-14.el9_2.3
1:1.20.1-14.el9_2.3
nginx-mod-stream-debuginfo
Red Hat:rhel_eus:9.2::crb
From an advisory covering 3 CVEs
 before 1:1.20.1-14.el9_2.3
1:1.20.1-14.el9_2.3
nginx
Red Hat:rhel_eus:9.2::appstream
 before 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
nginx-all-modules
Red Hat:rhel_eus:9.2::appstream
 before 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
nginx-core
Red Hat:rhel_eus:9.2::appstream
 before 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
nginx-core-debuginfo
Red Hat:rhel_eus:9.2::appstream
 before 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
nginx-debuginfo
Red Hat:rhel_eus:9.2::appstream
 before 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
nginx-debugsource
Red Hat:rhel_eus:9.2::appstream
 before 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
nginx-filesystem
Red Hat:rhel_eus:9.2::appstream
 before 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
nginx-mod-devel
Red Hat:rhel_eus:9.2::appstream
 before 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
nginx-mod-http-image-filter
Red Hat:rhel_eus:9.2::appstream
 before 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
nginx-mod-http-image-filter-debuginfo
Red Hat:rhel_eus:9.2::appstream
 before 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
nginx-mod-http-perl
Red Hat:rhel_eus:9.2::appstream
 before 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
nginx-mod-http-perl-debuginfo
Red Hat:rhel_eus:9.2::appstream
 before 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
nginx-mod-http-xslt-filter
Red Hat:rhel_eus:9.2::appstream
 before 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
nginx-mod-http-xslt-filter-debuginfo
Red Hat:rhel_eus:9.2::appstream
 before 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
nginx-mod-mail
Red Hat:rhel_eus:9.2::appstream
 before 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
nginx-mod-mail-debuginfo
Red Hat:rhel_eus:9.2::appstream
 before 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
nginx-mod-stream
Red Hat:rhel_eus:9.2::appstream
 before 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
nginx-mod-stream-debuginfo
Red Hat:rhel_eus:9.2::appstream
 before 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1
nginx
Red Hat:rhel_eus:9.4::appstream
 before 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-all-modules
Red Hat:rhel_eus:9.4::appstream
 before 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-core
Red Hat:rhel_eus:9.4::appstream
 before 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-core-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-debugsource
Red Hat:rhel_eus:9.4::appstream
 before 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-filesystem
Red Hat:rhel_eus:9.4::appstream
 before 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-mod-devel
Red Hat:rhel_eus:9.4::appstream
 before 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-mod-http-image-filter
Red Hat:rhel_eus:9.4::appstream
 before 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-mod-http-image-filter-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-mod-http-perl
Red Hat:rhel_eus:9.4::appstream
 before 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-mod-http-perl-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-mod-http-xslt-filter
Red Hat:rhel_eus:9.4::appstream
 before 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-mod-http-xslt-filter-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-mod-mail
Red Hat:rhel_eus:9.4::appstream
 before 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-mod-mail-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-mod-stream
Red Hat:rhel_eus:9.4::appstream
 before 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-mod-stream-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-16.el9_4.3
1:1.20.1-16.el9_4.3
nginx-all-modules
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-16.el9_4.3
1:1.20.1-16.el9_4.3
nginx-core
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-16.el9_4.3
1:1.20.1-16.el9_4.3
nginx-core-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-16.el9_4.3
1:1.20.1-16.el9_4.3
nginx-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-16.el9_4.3
1:1.20.1-16.el9_4.3
nginx-debugsource
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-16.el9_4.3
1:1.20.1-16.el9_4.3
nginx-filesystem
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-16.el9_4.3
1:1.20.1-16.el9_4.3
nginx-mod-http-image-filter
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-16.el9_4.3
1:1.20.1-16.el9_4.3
nginx-mod-http-image-filter-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-16.el9_4.3
1:1.20.1-16.el9_4.3
nginx-mod-http-perl
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-16.el9_4.3
1:1.20.1-16.el9_4.3
nginx-mod-http-perl-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-16.el9_4.3
1:1.20.1-16.el9_4.3
nginx-mod-http-xslt-filter
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-16.el9_4.3
1:1.20.1-16.el9_4.3
nginx-mod-http-xslt-filter-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-16.el9_4.3
1:1.20.1-16.el9_4.3
nginx-mod-mail
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-16.el9_4.3
1:1.20.1-16.el9_4.3
nginx-mod-mail-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-16.el9_4.3
1:1.20.1-16.el9_4.3
nginx-mod-stream
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-16.el9_4.3
1:1.20.1-16.el9_4.3
nginx-mod-stream-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 1:1.20.1-16.el9_4.3
1:1.20.1-16.el9_4.3
nginx-core-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 3 CVEs
 before 1:1.20.1-16.el9_4.3
1:1.20.1-16.el9_4.3
nginx-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 3 CVEs
 before 1:1.20.1-16.el9_4.3
1:1.20.1-16.el9_4.3
nginx-debugsource
Red Hat:rhel_eus:9.4::crb
From an advisory covering 3 CVEs
 before 1:1.20.1-16.el9_4.3
1:1.20.1-16.el9_4.3
nginx-mod-devel
Red Hat:rhel_eus:9.4::crb
From an advisory covering 3 CVEs
 before 1:1.20.1-16.el9_4.3
1:1.20.1-16.el9_4.3
nginx-mod-http-image-filter-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 3 CVEs
 before 1:1.20.1-16.el9_4.3
1:1.20.1-16.el9_4.3
nginx-mod-http-perl-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 3 CVEs
 before 1:1.20.1-16.el9_4.3
1:1.20.1-16.el9_4.3
nginx-mod-http-xslt-filter-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 3 CVEs
 before 1:1.20.1-16.el9_4.3
1:1.20.1-16.el9_4.3
nginx-mod-mail-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 3 CVEs
 before 1:1.20.1-16.el9_4.3
1:1.20.1-16.el9_4.3
nginx-mod-stream-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 3 CVEs
 before 1:1.20.1-16.el9_4.3
1:1.20.1-16.el9_4.3
nginx
Rocky Linux:9
 before 1:1.22.1-8.module+el9.6.0+32001+2660e3dc.1
1:1.22.1-8.module+el9.6.0+32001+2660e3dc.1
nginx
Rocky Linux:9
 before 1:1.24.0-4.module+el9.6.0+31999+10edc144.1
1:1.24.0-4.module+el9.6.0+31999+10edc144.1
nginx
Rocky Linux:9
From an advisory covering 3 CVEs
 before 2:1.20.1-22.el9_6.2
2:1.20.1-22.el9_6.2
nginx
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 2 CVEs
 before 1.21.5-150400.3.6.1
1.21.5-150400.3.6.1
nginx
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 1.21.5-150400.3.6.1
1.21.5-150400.3.6.1
nginx
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 2 CVEs
 before 1.21.5-150400.3.6.1
1.21.5-150400.3.6.1
nginx
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 1.21.5-150400.3.6.1
1.21.5-150400.3.6.1
nginx
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 1.21.5-150400.3.6.1
1.21.5-150400.3.6.1
nginx
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 1.21.5-150400.3.6.1
1.21.5-150400.3.6.1
nginx
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 2 CVEs
 before 1.21.5-150400.3.6.1
1.21.5-150400.3.6.1
nginx
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 2 CVEs
 before 1.21.5-150400.3.6.1
1.21.5-150400.3.6.1
nginx
SUSE:Manager Proxy 4.3
From an advisory covering 2 CVEs
 before 1.21.5-150400.3.6.1
1.21.5-150400.3.6.1
nginx
SUSE:Manager Server 4.3
From an advisory covering 2 CVEs
 before 1.21.5-150400.3.6.1
1.21.5-150400.3.6.1
nginx
SUSE:Linux Enterprise Module for Server Applications 15 SP6
From an advisory covering 2 CVEs
 before 1.21.5-150600.10.3.1
1.21.5-150600.10.3.1
nginx
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 1.21.5-150600.10.3.1
1.21.5-150600.10.3.1
nginx
Ubuntu:Pro:14.04:LTS
 before 1.4.6-1ubuntu3.9+esm5, plus listed versions
1.4.1-3ubuntu11.4.3-2ubuntu11.4.4-1ubuntu11.4.4-2ubuntu11.4.4-4ubuntu1
Show 16 moreShow less
1.4.5-1ubuntu11.4.6-1ubuntu21.4.6-1ubuntu31.4.6-1ubuntu3.11.4.6-1ubuntu3.21.4.6-1ubuntu3.31.4.6-1ubuntu3.41.4.6-1ubuntu3.51.4.6-1ubuntu3.61.4.6-1ubuntu3.71.4.6-1ubuntu3.81.4.6-1ubuntu3.91.4.6-1ubuntu3.9+esm11.4.6-1ubuntu3.9+esm21.4.6-1ubuntu3.9+esm31.4.6-1ubuntu3.9+esm4
1.4.6-1ubuntu3.9+esm5
nginx
Ubuntu:Pro:16.04:LTS
 before 1.10.3-0ubuntu0.16.04.5+esm6, plus listed versions
1.9.3-1ubuntu11.9.6-2ubuntu11.9.6-2ubuntu21.9.9-0ubuntu11.9.9-1ubuntu1
Show 22 moreShow less
1.9.10-0ubuntu11.9.10-1ubuntu11.9.11-0ubuntu11.9.11-0ubuntu21.9.12-0ubuntu11.9.13-0ubuntu11.9.14-0ubuntu11.9.15-0ubuntu11.10.0-0ubuntu0.16.04.11.10.0-0ubuntu0.16.04.21.10.0-0ubuntu0.16.04.31.10.0-0ubuntu0.16.04.41.10.3-0ubuntu0.16.04.11.10.3-0ubuntu0.16.04.21.10.3-0ubuntu0.16.04.31.10.3-0ubuntu0.16.04.41.10.3-0ubuntu0.16.04.51.10.3-0ubuntu0.16.04.5+esm11.10.3-0ubuntu0.16.04.5+esm21.10.3-0ubuntu0.16.04.5+esm31.10.3-0ubuntu0.16.04.5+esm41.10.3-0ubuntu0.16.04.5+esm5
1.10.3-0ubuntu0.16.04.5+esm6
nginx
Ubuntu:Pro:18.04:LTS
 before 1.14.0-0ubuntu1.11+esm1, plus listed versions
1.12.1-0ubuntu21.13.6-2ubuntu11.13.6-2ubuntu21.13.10-1ubuntu11.13.12-0ubuntu1
Show 11 moreShow less
1.14.0-0ubuntu11.14.0-0ubuntu1.11.14.0-0ubuntu1.21.14.0-0ubuntu1.31.14.0-0ubuntu1.41.14.0-0ubuntu1.51.14.0-0ubuntu1.61.14.0-0ubuntu1.71.14.0-0ubuntu1.91.14.0-0ubuntu1.101.14.0-0ubuntu1.11
1.14.0-0ubuntu1.11+esm1
nginx
Ubuntu:20.04:LTS
 before 1.18.0-0ubuntu1.6, plus listed versions
1.16.1-0ubuntu21.16.1-0ubuntu31.17.5-0ubuntu11.17.6-0ubuntu11.17.7-0ubuntu1
Show 12 moreShow less
1.17.8-0ubuntu11.17.8-0ubuntu21.17.8-0ubuntu31.17.9-0ubuntu11.17.9-0ubuntu21.17.9-0ubuntu31.17.10-0ubuntu11.18.0-0ubuntu11.18.0-0ubuntu1.21.18.0-0ubuntu1.31.18.0-0ubuntu1.41.18.0-0ubuntu1.5
1.18.0-0ubuntu1.6
nginx
Ubuntu:22.04:LTS
 before 1.18.0-6ubuntu14.5, plus listed versions
1.18.0-6ubuntu111.18.0-6ubuntu121.18.0-6ubuntu141.18.0-6ubuntu14.11.18.0-6ubuntu14.21.18.0-6ubuntu14.31.18.0-6ubuntu14.4
1.18.0-6ubuntu14.5
nginx
Ubuntu:24.04:LTS
 before 1.24.0-2ubuntu7.1, plus listed versions
1.24.0-1ubuntu11.24.0-2ubuntu11.24.0-2ubuntu21.24.0-2ubuntu31.24.0-2ubuntu41.24.0-2ubuntu61.24.0-2ubuntu7
1.24.0-2ubuntu7.1
nginx
openSUSE:Tumbleweed
 before 1.27.1-1.1
1.27.1-1.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-7347 is a medium vulnerability (CVSS 5.7) in F5 Nginx Open Source, published August 14, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 25th percentile. Fixed in nginx 1.26.2-r0.

References

Show 60 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open