nginx -- Vulnerability in the ngx_http_mp4_module

2024-08-1400:00:00

vuxml.freebsd.org

nginx

update fix

buffer overread vulnerability

ngx_http_mp4_module

unix

CVSS3

4.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

CVSS4

5.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/SC:N/VI:N/SI:N/VA:H/SA:N

AI Score

Confidence

Low

JSON

The nginx development team reports:

This update fixes the buffer overread vulnerability in the
ngx_http_mp4_module.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchnginx-devel= 1.5.13,3UNKNOWN
FreeBSDanynoarchnginx-devel< 1.27.1,3UNKNOWN
FreeBSDanynoarchnginx= 1.6.0,3UNKNOWN
FreeBSDanynoarchnginx< 1.26.2,3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	nginx-devel	= 1.5.13,3	UNKNOWN
FreeBSD	any	noarch	nginx-devel	< 1.27.1,3	UNKNOWN
FreeBSD	any	noarch	nginx	= 1.6.0,3	UNKNOWN
FreeBSD	any	noarch	nginx	< 1.26.2,3	UNKNOWN