Red Hat Security AdvisoryRHSA-2025:3262
nginx:1.24 security update
Released 2025-03-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) nginx-1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1.aarch64::nginx:1.24, nginx-1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1.ppc64le::nginx:1.24, nginx-1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1.s390x::nginx:1.24 +32
Fixes 1 record
Priority LOW 26
NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file.
CVSS 4.0MEDIUM 5.7· Local · Low privileges · No interaction · EPSS 0.0032 · Published 2024-08-14 · Partial fix CWE-126
