CVE-2022-41743

🗓️ 19 Oct 2022 21:21:29Reported by f5Type

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 85 Views

NGINX Plus before versions R27 P1 and R26 P1 have vulnerability in ngx_http_hls_module, allowing local attacker to corrupt worker memory, leading to crash or potential impact using crafted audio/video file

Reporter	Title	Published	Views	Family All 13
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in F5 NGINX	2 May 202320:56	–	ibm
Circl	CVE-2022-41743	20 Oct 202202:20	–	circl
CNNVD	多款F5产品缓冲区错误漏洞	19 Oct 202200:00	–	cnnvd
Cvelist	CVE-2022-41743 NGINX ngx_http_hls_module vulnerability CVE-2022-41743	19 Oct 202221:21	–	cvelist
EUVD	EUVD-2022-44914	3 Oct 202520:07	–	euvd
F5 Networks	K01112063: NGINX ngx_http_hls_module vulnerability CVE-2022-41743	21 Feb 202320:00	–	f5
F5 Networks	K30425568: Overview of F5 vulnerabilities (October 2022)	21 Feb 202320:02	–	f5
NCSC	Vulnerabilities fixed in several F5 products	20 Oct 202200:00	–	ncsc
NVD	CVE-2022-41743	19 Oct 202222:15	–	nvd
OSV	BIT-NGINX-INGRESS-CONTROLLER-2022-41743	6 Nov 202308:56	–	osv

NVD

Node

f5 nginx_ingress_controllerRange1.9.0–1.12.4

f5 nginx_ingress_controllerRange2.0.0–2.4.0

f5 nginx_plusRanger22–r27

[
  {
    "vendor": "F5",
    "product": "NGINX Plus",
    "versions": [
      {
        "version": "R27",
        "status": "affected",
        "lessThan": "R27-p1",
        "versionType": "custom"
      },
      {
        "version": "R1",
        "status": "affected",
        "lessThan": "R26-p1",
        "versionType": "custom"
      }
    ]
  }
]