Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: [UNKNOWN] nginx — RHSA-2018:3681 Clear all filters
TI-2018-12055 CVE-2018-16845 · GHSA-vq5f-vpgw-9vcp

Uncontrolled resource consumption in [UNKNOWN] nginx

Priority LOW 39

nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an attacker to cause infinite loop in a worker process, cause a worker process crash, or might result in worker proce…

CVSS 3.1MEDIUM 6.1 Local No auth User interaction EPSS 0.09845 Published 2018-11-07 Fixed CWE-400
TI-2018-12054 CVE-2018-16844 · GHSA-4576-cf38-77f2

Uncontrolled resource consumption in [UNKNOWN] nginx

Priority MEDIUM 47

nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive CPU usage.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.12733 Published 2018-11-07 Partial fix CWE-400
TI-2018-12053 CVE-2018-16843 · GHSA-4p62-4q7w-qmcg

Uncontrolled resource consumption in [UNKNOWN] nginx

Priority MEDIUM 63

nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.47985 Published 2018-11-07 Fixed CWE-400