Lucene search
F5F5:K000140529HistoryAug 14, 2024 - 12:00 a.m.
K000140529: NGINX ngx_http_mp4_module vulnerability CVE-2024-7347
2024-08-1400:00:00
my.f5.com
8
nginx
ngx_http_mp4_module
vulnerability
cve-2024-7347
memory over-read
mp4 file
denial-of-service
data plane
nginx plus
CVSS3
4.7
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS4
5.7
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/SC:N/VI:N/SI:N/VA:H/SA:N
AI Score
5
Confidence
High
EPSS
0
Percentile
13.3%
Security Advisory Description
NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngx_http_mp4_module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted mp4 file with the ngx_http_mp4_module. (CVE-2024-7347)
Impact
Traffic is disrupted while the NGINX worker process restarts. This vulnerability allows a local, authenticated attacker to cause a denial-of-service (DoS) of NGINX. There is no control plane exposure; this is a data plane issue only.
Note: The MP4 module is not included by default and must be explicitly enabled for NGINX Open Source edition. The MP4 module is included in NGINX Plus.
Affected configurations
Node
f5big-ip_next_central_managerMatch20.1.1
ORf5big-ip_next_central_managerMatch20.2.0
ORf5big-ip_next_central_managerMatch20.2.1
ORf5big-ip_nextMatch1.1.0
ORf5big-ip_nextMatch1.1.1
ORf5big-ip_nextMatch1.2.0
ORf5big-ip_nextMatch1.2.1
ORf5big-ip_nextMatch1.3.0
ORf5big-ip_nextMatch1.3.1
ORf5big-ip_dnsMatch1.1.0
ORf5big-ip_dnsMatch1.1.1
ORf5big-ip_dnsMatch1.2.0
ORf5big-ip_dnsMatch1.2.1
ORf5big-ip_dnsMatch1.3.0
ORf5big-ip_dnsMatch1.3.1
ORf5big-ip_nextMatch1.1.0
ORf5big-ip_nextMatch1.1.1
ORf5big-ip_nextMatch1.2.0
ORf5big-ip_nextMatch1.2.1
ORf5big-ip_nextMatch1.3.0
ORf5big-ip_nextMatch1.3.1
ORf5big-ip_ltmMatch20.2.0
ORf5big-ip_ltmMatch20.2.1
ORf5big-ip_nextMatch1.7.0
ORf5big-ip_nextMatch1.7.1
ORf5big-ip_nextMatch1.7.2
ORf5big-ip_nextMatch1.7.3
ORf5big-ip_nextMatch1.7.4
ORf5big-ip_nextMatch1.7.5
ORf5big-ip_nextMatch1.7.6
ORf5big-ip_nextMatch1.7.7
ORf5big-ip_nextMatch1.7.8
ORf5big-ip_nextMatch1.7.9
ORf5big-ip_nextMatch1.8.0
ORf5big-ip_nextMatch1.8.2
ORf5big-ip_nextMatch1.9.0
ORf5big-ip_nextMatch1.9.1
ORf5big-ip_nextMatch1.9.2
ORf5big-ip_nextMatch20.2.0
ORf5big-ip_nextMatch20.2.1
ORf5big-ipMatch15.1.0
ORf5big-ipMatch15.1.1
ORf5big-ipMatch15.1.10
ORf5big-ipMatch15.1.2
ORf5big-ipMatch15.1.3
ORf5big-ipMatch15.1.4
ORf5big-ipMatch15.1.5
ORf5big-ipMatch15.1.6
ORf5big-ipMatch15.1.7
ORf5big-ipMatch15.1.8
ORf5big-ipMatch15.1.9
ORf5big-ip_afmMatch15.1.0
ORf5big-ip_afmMatch15.1.1
ORf5big-ip_afmMatch15.1.10
ORf5big-ip_afmMatch15.1.2
ORf5big-ip_afmMatch15.1.3
ORf5big-ip_afmMatch15.1.4
ORf5big-ip_afmMatch15.1.5
ORf5big-ip_afmMatch15.1.6
ORf5big-ip_afmMatch15.1.7
ORf5big-ip_afmMatch15.1.8
ORf5big-ip_afmMatch15.1.9
ORf5big-ip_afmMatch16.1.0
ORf5big-ip_afmMatch16.1.1
ORf5big-ip_afmMatch16.1.2
ORf5big-ip_afmMatch16.1.3
ORf5big-ip_afmMatch16.1.4
ORf5big-ip_afmMatch16.1.5
ORf5big-ip_afmMatch17.1.0
ORf5big-ip_afmMatch17.1.1
ORf5big-ip_analyticsMatch15.1.0
ORf5big-ip_analyticsMatch15.1.1
ORf5big-ip_analyticsMatch15.1.10
ORf5big-ip_analyticsMatch15.1.2
ORf5big-ip_analyticsMatch15.1.3
ORf5big-ip_analyticsMatch15.1.4
ORf5big-ip_analyticsMatch15.1.5
ORf5big-ip_analyticsMatch15.1.6
ORf5big-ip_analyticsMatch15.1.7
ORf5big-ip_analyticsMatch15.1.8
ORf5big-ip_analyticsMatch15.1.9
ORf5big-ip_analyticsMatch16.1.0
ORf5big-ip_analyticsMatch16.1.1
ORf5big-ip_analyticsMatch16.1.2
ORf5big-ip_analyticsMatch16.1.3
ORf5big-ip_analyticsMatch16.1.4
ORf5big-ip_analyticsMatch16.1.5
ORf5big-ip_analyticsMatch17.1.0
ORf5big-ip_analyticsMatch17.1.1
ORf5big-ip_apmMatch15.1.0
ORf5big-ip_apmMatch15.1.1
ORf5big-ip_apmMatch15.1.10
ORf5big-ip_apmMatch15.1.2
ORf5big-ip_apmMatch15.1.3
ORf5big-ip_apmMatch15.1.4
ORf5big-ip_apmMatch15.1.5
ORf5big-ip_apmMatch15.1.6
ORf5big-ip_apmMatch15.1.7
ORf5big-ip_apmMatch15.1.8
ORf5big-ip_apmMatch15.1.9
ORf5big-ip_apmMatch16.1.0
ORf5big-ip_apmMatch16.1.1
ORf5big-ip_apmMatch16.1.2
ORf5big-ip_apmMatch16.1.3
ORf5big-ip_apmMatch16.1.4
ORf5big-ip_apmMatch16.1.5
ORf5big-ip_apmMatch17.1.0
ORf5big-ip_apmMatch17.1.1
ORf5big-ip_asmMatch15.1.0
ORf5big-ip_asmMatch15.1.1
ORf5big-ip_asmMatch15.1.10
ORf5big-ip_asmMatch15.1.2
ORf5big-ip_asmMatch15.1.3
ORf5big-ip_asmMatch15.1.4
ORf5big-ip_asmMatch15.1.5
ORf5big-ip_asmMatch15.1.6
ORf5big-ip_asmMatch15.1.7
ORf5big-ip_asmMatch15.1.8
ORf5big-ip_asmMatch15.1.9
ORf5big-ip_asmMatch16.1.0
ORf5big-ip_asmMatch16.1.1
ORf5big-ip_asmMatch16.1.2
ORf5big-ip_asmMatch16.1.3
ORf5big-ip_asmMatch16.1.4
ORf5big-ip_asmMatch16.1.5
ORf5big-ip_asmMatch17.1.0
ORf5big-ip_asmMatch17.1.1
ORf5big-ip_dnsMatch15.1.0
ORf5big-ip_dnsMatch15.1.1
ORf5big-ip_dnsMatch15.1.10
ORf5big-ip_dnsMatch15.1.2
ORf5big-ip_dnsMatch15.1.3
ORf5big-ip_dnsMatch15.1.4
ORf5big-ip_dnsMatch15.1.5
ORf5big-ip_dnsMatch15.1.6
ORf5big-ip_dnsMatch15.1.7
ORf5big-ip_dnsMatch15.1.8
ORf5big-ip_dnsMatch15.1.9
ORf5big-ip_dnsMatch16.1.0
ORf5big-ip_dnsMatch16.1.1
ORf5big-ip_dnsMatch16.1.2
ORf5big-ip_dnsMatch16.1.3
ORf5big-ip_dnsMatch16.1.4
ORf5big-ip_dnsMatch16.1.5
ORf5big-ip_dnsMatch17.1.0
ORf5big-ip_dnsMatch17.1.1
ORf5big-ipMatch15.1.0
ORf5big-ipMatch15.1.1
ORf5big-ipMatch15.1.10
ORf5big-ipMatch15.1.2
ORf5big-ipMatch15.1.3
ORf5big-ipMatch15.1.4
ORf5big-ipMatch15.1.5
ORf5big-ipMatch15.1.6
ORf5big-ipMatch15.1.7
ORf5big-ipMatch15.1.8
ORf5big-ipMatch15.1.9
ORf5big-ipMatch16.1.0
ORf5big-ipMatch16.1.1
ORf5big-ipMatch16.1.2
ORf5big-ipMatch16.1.3
ORf5big-ipMatch16.1.4
ORf5big-ipMatch16.1.5
ORf5big-ipMatch17.1.0
ORf5big-ipMatch17.1.1
ORf5big-ip_link_controllerMatch15.1.0
ORf5big-ip_link_controllerMatch15.1.1
ORf5big-ip_link_controllerMatch15.1.10
ORf5big-ip_link_controllerMatch15.1.2
ORf5big-ip_link_controllerMatch15.1.3
ORf5big-ip_link_controllerMatch15.1.4
ORf5big-ip_link_controllerMatch15.1.5
ORf5big-ip_link_controllerMatch15.1.6
ORf5big-ip_link_controllerMatch15.1.7
ORf5big-ip_link_controllerMatch15.1.8
ORf5big-ip_link_controllerMatch15.1.9
ORf5big-ip_link_controllerMatch16.1.0
ORf5big-ip_link_controllerMatch16.1.1
ORf5big-ip_link_controllerMatch16.1.2
ORf5big-ip_link_controllerMatch16.1.3
ORf5big-ip_link_controllerMatch16.1.4
ORf5big-ip_link_controllerMatch16.1.5
ORf5big-ip_link_controllerMatch17.1.0
ORf5big-ip_link_controllerMatch17.1.1
ORf5big-ip_ltmMatch15.1.0
ORf5big-ip_ltmMatch15.1.1
ORf5big-ip_ltmMatch15.1.10
ORf5big-ip_ltmMatch15.1.2
ORf5big-ip_ltmMatch15.1.3
ORf5big-ip_ltmMatch15.1.4
ORf5big-ip_ltmMatch15.1.5
ORf5big-ip_ltmMatch15.1.6
ORf5big-ip_ltmMatch15.1.7
ORf5big-ip_ltmMatch15.1.8
ORf5big-ip_ltmMatch15.1.9
ORf5big-ip_ltmMatch16.1.0
ORf5big-ip_ltmMatch16.1.1
ORf5big-ip_ltmMatch16.1.2
ORf5big-ip_ltmMatch16.1.3
ORf5big-ip_ltmMatch16.1.4
ORf5big-ip_ltmMatch16.1.5
ORf5big-ip_ltmMatch17.1.0
ORf5big-ip_ltmMatch17.1.1
ORf5big-ip_pemMatch15.1.0
ORf5big-ip_pemMatch15.1.1
ORf5big-ip_pemMatch15.1.10
ORf5big-ip_pemMatch15.1.2
ORf5big-ip_pemMatch15.1.3
ORf5big-ip_pemMatch15.1.4
ORf5big-ip_pemMatch15.1.5
ORf5big-ip_pemMatch15.1.6
ORf5big-ip_pemMatch15.1.7
ORf5big-ip_pemMatch15.1.8
ORf5big-ip_pemMatch15.1.9
ORf5big-ip_pemMatch16.1.0
ORf5big-ip_pemMatch16.1.1
ORf5big-ip_pemMatch16.1.2
ORf5big-ip_pemMatch16.1.3
ORf5big-ip_pemMatch16.1.4
ORf5big-ip_pemMatch16.1.5
ORf5big-ip_pemMatch17.1.0
ORf5big-ip_pemMatch17.1.1
ORf5nginx_agentMatch2.17.0
ORf5nginx_agentMatch2.18.0
ORf5nginx_agentMatch2.19.0
ORf5nginx_agentMatch2.20.0
ORf5nginx_agentMatch2.20.1
ORf5nginx_agentMatch2.22.0
ORf5nginx_agentMatch2.22.1
ORf5nginx_agentMatch2.23.0
ORf5nginx_agentMatch2.23.1
ORf5nginx_agentMatch2.23.2
ORf5nginx_agentMatch2.23.3
ORf5nginx_agentMatch2.24.0
ORf5nginx_agentMatch2.24.1
ORf5nginx_agentMatch2.25.0
ORf5nginx_agentMatch2.25.1
ORf5nginx_agentMatch2.26.0
ORf5nginx_agentMatch2.26.1
ORf5nginx_agentMatch2.26.2
ORf5nginx_agentMatch2.27.0
ORf5nginx_agentMatch2.28.0
ORf5nginx_agentMatch2.28.1
ORf5nginx_agentMatch2.29.0
ORf5nginx_agentMatch2.30.0
ORf5nginx_agentMatch2.30.1
ORf5nginx_agentMatch2.30.2
ORf5nginx_agentMatch2.30.3
ORf5nginx_agentMatch2.31.0
ORf5nginx_agentMatch2.31.1
ORf5nginx_agentMatch2.31.2
ORf5nginx_agentMatch2.32.0
ORf5nginx_agentMatch2.32.1
ORf5nginx_agentMatch2.32.2
ORf5nginx_agentMatch2.33.0
ORf5nginx_agentMatch2.34.0
ORf5nginx_agentMatch2.34.1
ORf5nginx_agentMatch2.35.0
ORf5nginx_agentMatch2.35.1
ORf5nginx_agentMatch2.36.0
ORf5nginx_agentMatch2.36.1
ORf5nginx_api_connectivity_managerMatch1.0.0
ORf5nginx_api_connectivity_managerMatch1.1.0
ORf5nginx_api_connectivity_managerMatch1.1.1
ORf5nginx_api_connectivity_managerMatch1.2.0
ORf5nginx_api_connectivity_managerMatch1.3.0
ORf5nginx_api_connectivity_managerMatch1.3.1
ORf5nginx_api_connectivity_managerMatch1.4.0
ORf5nginx_api_connectivity_managerMatch1.4.1
ORf5nginx_api_connectivity_managerMatch1.5.0
ORf5nginx_api_connectivity_managerMatch1.6.0
ORf5nginx_api_connectivity_managerMatch1.7.0
ORf5nginx_api_connectivity_managerMatch1.8.0
ORf5nginx_api_connectivity_managerMatch1.9.0
ORf5nginx_api_connectivity_managerMatch1.9.1
ORf5nginx_api_connectivity_managerMatch1.9.2
ORf5nginx_app_protectMatch2.4.0
ORf5nginx_app_protectMatch3.0.0
ORf5nginx_app_protectMatch3.1.0
ORf5nginx_app_protectMatch4.0.1
ORf5nginx_app_protectMatch4.1.0
ORf5nginx_app_protectMatch4.2.0
ORf5nginx_app_protectMatch4.3.0
ORf5nginx_app_protectMatch4.4.0
ORf5nginx_app_protectMatch3.11.0
ORf5nginx_app_protectMatch3.12.1
ORf5nginx_app_protectMatch3.12.2
ORf5nginx_app_protectMatch4.0.0
ORf5nginx_app_protectMatch4.1.0
ORf5nginx_app_protectMatch4.10.0
ORf5nginx_app_protectMatch4.2.0
ORf5nginx_app_protectMatch4.3.0
ORf5nginx_app_protectMatch4.4.0
ORf5nginx_app_protectMatch4.5.0
ORf5nginx_app_protectMatch4.6.0
ORf5nginx_app_protectMatch4.7.0
ORf5nginx_app_protectMatch4.8.0
ORf5nginx_app_protectMatch4.8.1
ORf5nginx_app_protectMatch4.9.0
ORf5nginx_app_protectMatch5.0.0
ORf5nginx_app_protectMatch5.1.0
ORf5nginx_app_protectMatch5.2.0
ORf5nginx_controllerMatch3.18.3
ORf5nginx_controllerMatch3.19.1-apim
ORf5nginx_controllerMatch3.19.2-apim
ORf5nginx_controllerMatch3.19.3-apim
ORf5nginx_controllerMatch3.19.4-apim
ORf5nginx_controllerMatch3.19.5-apim
ORf5nginx_controllerMatch3.19.6-apim
ORf5nginx_controllerMatch3.20.0
ORf5nginx_controllerMatch3.20.1
ORf5nginx_controllerMatch3.21.0
ORf5nginx_controllerMatch3.22.0
ORf5nginx_controllerMatch3.22.1
ORf5nginx_controllerMatch3.22.2
ORf5nginx_controllerMatch3.22.3
ORf5nginx_controllerMatch3.22.4
ORf5nginx_controllerMatch3.22.5
ORf5nginx_controllerMatch3.22.6
ORf5nginx_controllerMatch3.22.7
ORf5nginx_controllerMatch3.22.8
ORf5nginx_controllerMatch3.22.9
ORf5nginx_ingress_controllerMatch1.12.5
ORf5nginx_ingress_controllerMatch2.2.1
ORf5nginx_ingress_controllerMatch2.2.2
ORf5nginx_ingress_controllerMatch2.3.0
ORf5nginx_ingress_controllerMatch2.4.0
ORf5nginx_ingress_controllerMatch2.4.1
ORf5nginx_ingress_controllerMatch2.4.2
ORf5nginx_ingress_controllerMatch3.0.0
ORf5nginx_ingress_controllerMatch3.0.1
ORf5nginx_ingress_controllerMatch3.0.2
ORf5nginx_ingress_controllerMatch3.1.0
ORf5nginx_ingress_controllerMatch3.1.1
ORf5nginx_ingress_controllerMatch3.2.0
ORf5nginx_ingress_controllerMatch3.2.1
ORf5nginx_ingress_controllerMatch3.3.0
ORf5nginx_ingress_controllerMatch3.3.1
ORf5nginx_ingress_controllerMatch3.4.0
ORf5nginx_ingress_controllerMatch3.4.1
ORf5nginx_ingress_controllerMatch3.4.2
ORf5nginx_ingress_controllerMatch3.5.0
ORf5nginx_ingress_controllerMatch3.5.1
ORf5nginx_ingress_controllerMatch3.5.2
ORf5nginx_ingress_controllerMatch3.6.0
ORf5nginx_instance_managerMatch2.10.0
ORf5nginx_instance_managerMatch2.10.1
ORf5nginx_instance_managerMatch2.11.0
ORf5nginx_instance_managerMatch2.12.0
ORf5nginx_instance_managerMatch2.13.0
ORf5nginx_instance_managerMatch2.13.1
ORf5nginx_instance_managerMatch2.14.0
ORf5nginx_instance_managerMatch2.14.1
ORf5nginx_instance_managerMatch2.15.0
ORf5nginx_instance_managerMatch2.15.1
ORf5nginx_instance_managerMatch2.16.0
ORf5nginx_instance_managerMatch2.17.0
ORf5nginx_instance_managerMatch2.17.1
ORf5nginx_instance_managerMatch2.3.1
ORf5nginx_instance_managerMatch2.4.0
ORf5nginx_instance_managerMatch2.5.0
ORf5nginx_instance_managerMatch2.5.1
ORf5nginx_instance_managerMatch2.6.0
ORf5nginx_instance_managerMatch2.7.0
ORf5nginx_instance_managerMatch2.8.0
ORf5nginx_instance_managerMatch2.9.0
ORf5nginx_instance_managerMatch2.9.1
ORf5nginx_security_monitoringMatch1.0.0
ORf5nginx_security_monitoringMatch1.1.0
ORf5nginx_security_monitoringMatch1.2.0
ORf5nginx_security_monitoringMatch1.3.0
ORf5nginx_security_monitoringMatch1.4.0
ORf5nginx_security_monitoringMatch1.5.0
ORf5nginx_security_monitoringMatch1.6.0
ORf5nginx_security_monitoringMatch1.7.0
ORf5nginx_security_monitoringMatch1.7.1
ORf5nginxMatchr27plus
ORf5nginxMatchr28plus
ORf5nginxMatchr29plus
ORf5nginxMatchr30plus
ORf5nginxMatchr31plus
ORf5nginxMatchr32plus
ORf5nginx_service_meshMatch1.1.0
ORf5nginx_service_meshMatch1.2.0
ORf5nginx_service_meshMatch1.2.1
ORf5nginx_service_meshMatch1.3.0
ORf5nginx_service_meshMatch1.3.1
ORf5nginx_service_meshMatch1.4.0
ORf5nginx_service_meshMatch1.4.1
ORf5nginx_service_meshMatch1.5.0
ORf5nginx_service_meshMatch1.6.0
ORf5nginx_service_meshMatch1.7.0
ORf5nginx_service_meshMatch2.0.0
ORf5nginxMatch1.27.0
ORf5nginxMatch1.28.0
ORf5nginxMatch1.29.0
ORf5nginxMatch1.29.1
ORf5nginxMatch1.30.0
ORf5nginxMatch1.31.0
ORf5nginxMatch1.31.1
ORf5nginxMatch1.32.0
ORf5nginxMatch1.32.1
ORf5f5os-aMatch1.5.1
ORf5f5os-aMatch1.5.2
ORf5f5os-aMatch1.7.0
ORf5f5os-cMatch1.6.0
ORf5f5os-cMatch1.6.1
ORf5f5os-cMatch1.6.2
ORf5big-iq_centralized_managementMatch8.2.0
ORf5big-iq_centralized_managementMatch8.3.0
ORf5big-ip_ddos_hybrid_defenderMatch15.1.0
ORf5big-ip_ddos_hybrid_defenderMatch15.1.1
ORf5big-ip_ddos_hybrid_defenderMatch16.1.0
ORf5big-ip_ddos_hybrid_defenderMatch17.1.0
ORf5ssl_orchestratorMatch15.1.0
ORf5ssl_orchestratorMatch15.1.1
ORf5ssl_orchestratorMatch15.1.2
ORf5ssl_orchestratorMatch15.1.9
ORf5ssl_orchestratorMatch16.1.0
ORf5ssl_orchestratorMatch16.1.1
ORf5ssl_orchestratorMatch16.1.3
ORf5ssl_orchestratorMatch16.1.4
ORf5ssl_orchestratorMatch17.1.0
ORf5ssl_orchestratorMatch17.1.1
ORf5traffix_signaling_delivery_controllerMatch5.1.0
ORf5traffix_signaling_delivery_controllerMatch5.2.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| f5 | big-ip_next_central_manager | 20.1.1 | cpe:2.3:a:f5:big-ip_next_central_manager:20.1.1:*:*:*:*:*:*:* |
| f5 | big-ip_next_central_manager | 20.2.0 | cpe:2.3:a:f5:big-ip_next_central_manager:20.2.0:*:*:*:*:*:*:* |
| f5 | big-ip_next_central_manager | 20.2.1 | cpe:2.3:a:f5:big-ip_next_central_manager:20.2.1:*:*:*:*:*:*:* |
| f5 | big-ip_next | 1.1.0 | cpe:2.3:a:f5:big-ip_next:1.1.0:*:*:*:*:*:*:* |
| f5 | big-ip_next | 1.1.1 | cpe:2.3:a:f5:big-ip_next:1.1.1:*:*:*:*:*:*:* |
| f5 | big-ip_next | 1.2.0 | cpe:2.3:a:f5:big-ip_next:1.2.0:*:*:*:*:*:*:* |
| f5 | big-ip_next | 1.2.1 | cpe:2.3:a:f5:big-ip_next:1.2.1:*:*:*:*:*:*:* |
| f5 | big-ip_next | 1.3.0 | cpe:2.3:a:f5:big-ip_next:1.3.0:*:*:*:*:*:*:* |
| f5 | big-ip_next | 1.3.1 | cpe:2.3:a:f5:big-ip_next:1.3.1:*:*:*:*:*:*:* |
| f5 | big-ip_dns | 1.1.0 | cpe:2.3:a:f5:big-ip_dns:1.1.0:*:*:*:*:*:*:* |
Related
vulnrichment
vulnrichment
CVE-2024-7347 NGINX MP4 module vulnerability
2024-08-14 14:32:33
nessus
nessus
Fedora 40 : nginx / nginx-mod-fancyindex / nginx-mod-modsecurity / etc (2024-6ba57fd2a3)
2024-08-26 00:00:00
Photon OS 5.0: Nginx PHSA-2024-5.0-0350
2024-08-22 00:00:00
Nginx 1.5.13 < 1.26.2 Buffer Over-read
2024-09-06 00:00:00
openvas
openvas
Fedora: Security Advisory for nginx (FEDORA-2024-6ba57fd2a3)
2024-08-26 00:00:00
Fedora: Security Advisory for nginx-mod-fancyindex (FEDORA-2024-6ba57fd2a3)
2024-08-26 00:00:00
Mageia: Security Advisory (MGASA-2024-0286)
2024-09-11 00:00:00
fedora
fedora
[SECURITY] Fedora 40 Update: nginx-mod-naxsi-1.6-6.fc40
2024-08-26 02:05:22
[SECURITY] Fedora 40 Update: nginx-mod-fancyindex-0.5.2-7.fc40
2024-08-26 02:05:22
[SECURITY] Fedora 39 Update: nginx-1.26.2-1.fc39
2024-08-26 01:31:55
osv
osv
nginx vulnerability
2024-09-16 12:02:52
BIT-nginx-2024-7347
2024-08-16 07:27:39
CVE-2024-7347
2024-08-14 15:15:31
mageia
mageia
Nginx has been updated to the latest stable release to fix CVE
2024-09-10 19:40:31
hackerone
hackerone
cvelist
cvelist
CVE-2024-7347 NGINX MP4 module vulnerability
2024-08-14 14:32:33
redhatcve
redhatcve
CVE-2024-7347
2024-08-16 00:12:20
nvd
nvd
CVE-2024-7347
2024-08-14 15:15:31
cve
cve
CVE-2024-7347
2024-08-14 15:15:31
alpinelinux
alpinelinux
CVE-2024-7347
2024-08-14 15:15:31
freebsd
freebsd
nginx -- Vulnerability in the ngx_http_mp4_module
2024-08-14 00:00:00
debiancve
debiancve
CVE-2024-7347
2024-08-14 15:15:31
cbl_mariner
cbl_mariner
CVE-2024-7347 affecting package nginx for versions less than 1.22.1-12
2024-09-03 11:12:01
ubuntucve
ubuntucve
CVE-2024-7347
2024-08-15 00:00:00
redos
redos
ROS-20240827-15
2024-08-27 00:00:00
nginx
nginx
Buffer overread in the ngx_http_mp4_module
2024-08-14 15:15:31
photon
photon
Moderate Photon OS Security Update - PHSA-2024-4.0-0670
2024-08-21 00:00:00
Moderate Photon OS Security Update - PHSA-2024-5.0-0350
2024-08-19 00:00:00
f5
f5
K000140552: Quarterly Security Notification (August 2024)
2024-08-14 00:00:00
CVSS3
4.7
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS4
5.7
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/SC:N/VI:N/SI:N/VA:H/SA:N
AI Score
5
Confidence
High
EPSS
0
Percentile
13.3%
Related for F5:K000140529