nginx vulnerabilities (Debian)
74 vulnerabilities.
nginxDebiannginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that...5.3 MediumnginxDebianNginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow...7.5 HighnginxDebiannginx - regression updateNo scorenginxDebianThe nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6...7.8 HighnginxDebianos/unix/ngx_files.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to...7.5 HighnginxDebianThe resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME...5.3 MediumnginxDebianUse-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9...9.8 CriticalnginxDebianThe resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a...7.5 HighnginxDebianThe STARTTLS implementation in mail/ngx_mail_smtp_handler.c in the SMTP proxy in nginx 1.5.x and...6.8 MediumnginxDebiannginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ticket_key...4.3 MediumnginxDebianHeap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.5.x...7.5 HighnginxDebiannginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended...7.5 HighnginxDebianThe default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions...7.5 HighnginxDebianhttp/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when...5.8 MediumnginxDebianThe TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other...2.6 LownginxDebianDirectory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for...2.1 LownginxDebianBuffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through...6.8 MediumnginxDebianUse-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP...5.0 MediumnginxDebianHeap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx...6.8 MediumnginxDebiannginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might...6.8 MediumnginxDebianDirectory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine...4.9 MediumnginxDebianApache Tomcat affected by vulnerability in TLS and SSL protocol5.8 MediumnginxDebiansrc/http/ngx_http_parse.c in nginx (aka Engine X) 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6...5.0 MediumnginxDebianBuffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39,...7.5 High