Lucene search
OracleLinuxELSA-2019-2799HistorySep 19, 2019 - 12:00 a.m.
nginx:1.14 security update
2019-09-1900:00:00
linux.oracle.com
168
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
[1:1.14.1-9.0.1]
- Remove Red Hat references [Orabug: 29498217]
[1:1.14.1-9] - Resolves: #1744811 - CVE-2019-9511 nginx:1.14/nginx: HTTP/2: large amount of
data request leads to denial of service - Resolves: #1744325 - CVE-2019-9513 nginx:1.14/nginx: HTTP/2: flood using
PRIORITY frames resulting in excessive resource consumption - Resolves: #1745094 - CVE-2019-9516 nginx:1.14/nginx: HTTP/2: 0-length
headers leads to denial of service
Related
nessus
nessus
SUSE SLES15 Security Update : nginx (SUSE-SU-2019:2559-1) (0-Length Headers Leak) (Data Dribble) (Resource Loop)
2019-10-07 00:00:00
CentOS 8 : nginx:1.14 (CESA-2019:2799)
2021-01-29 00:00:00
Rocky Linux 8 : nginx:1.14 (RLSA-2019:2799)
2023-11-06 00:00:00
mageia
mageia
Updated nginx packages fix security vulnerabilities
2019-11-30 16:06:06
Updated nghttp2 packages fix security vulnerabilities
2019-09-28 04:05:09
openvas
openvas
nginx HTTP/2 Multiple Vulnerablilities
2019-08-27 00:00:00
openSUSE: Security Advisory for nginx (openSUSE-SU-2019:2264-1)
2019-10-07 00:00:00
Ubuntu Update for nginx USN-4099-1
2019-08-16 00:00:00
rocky
rocky
nginx:1.14 security update
2019-09-17 08:45:10
nodejs:10 security update
2019-09-30 07:07:29
redhat
redhat
(RHSA-2019:2799) Important: nginx:1.14 security update
2019-09-17 08:45:10
(RHSA-2019:2746) Important: rh-nginx112-nginx security update
2019-09-12 11:30:03
(RHSA-2019:2745) Important: rh-nginx110-nginx security update
2019-09-12 11:28:52
suse
suse
Security update for nginx (moderate)
2019-10-06 00:00:00
Security update for nghttp2 (moderate)
2019-10-01 00:00:00
Security update for nghttp2 (moderate)
2019-10-01 00:00:00
osv
osv
Important: nginx:1.14 security update
2019-09-17 08:45:10
nginx - security update
2019-08-22 00:00:00
Important: nginx:1.14 security update
2019-09-17 08:45:10
hackerone
hackerone
Localize: Nginx version is disclosed in HTTP response
2020-01-26 21:54:31
debian
debian
[SECURITY] [DSA 4505-1] nginx security update
2019-08-22 19:38:21
[SECURITY] [DSA 4511-1] nghttp2 security update
2019-09-01 21:08:06
[SECURITY] [DSA 4669-1] nodejs security update
2020-04-29 21:05:57
almalinux
almalinux
Important: nginx:1.14 security update
2019-09-17 08:45:10
Important: nodejs:10 security update
2019-09-30 07:07:29
amazon
amazon
Important: nginx
2019-09-30 21:06:00
Important: nghttp2
2019-09-30 21:03:00
Important: nghttp2
2019-10-08 21:43:00
archlinux
archlinux
[ASA-201908-13] nginx: denial of service
2019-08-16 00:00:00
[ASA-201908-12] nginx-mainline: denial of service
2019-08-16 00:00:00
[ASA-201908-17] libnghttp2: denial of service
2019-08-27 00:00:00
ubuntu
ubuntu
nginx vulnerabilities
2019-08-15 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: nginx-1.16.1-1.fc30
2019-08-22 01:18:25
[SECURITY] Fedora 30 Update: nghttp2-1.39.2-1.fc30
2019-08-23 01:27:34
[SECURITY] Fedora 29 Update: nghttp2-1.39.2-1.fc29
2019-08-27 18:38:08
freebsd
freebsd
NGINX -- Multiple vulnerabilities
2019-08-13 00:00:00
nghttp2 -- multiple vulnerabilities
2019-08-13 00:00:00
Node.js -- multiple vulnerabilities
2019-08-16 00:00:00
f5
f5
ibm
ibm
oraclelinux
oraclelinux
nghttp2 security update
2019-09-10 00:00:00
httpd:2.4 security update
2019-09-24 00:00:00
nghttp2 security update
2020-07-06 00:00:00
githubexploit
githubexploit
Exploit for Uncontrolled Resource Consumption in F5 Nginx
2020-12-22 10:16:11
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0342
2023-02-28 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package node version 10.16.3-alt1
2019-08-30 00:00:00
symantec
symantec
Nginx Vulnerabilities Jul 2017 - Oct 2019
2020-05-06 18:48:22
Microsoft Windows 'HTTP.sys' CVE-2019-9511 Denial of Service Vulnerability
2019-08-13 00:00:00
Microsoft Windows 'HTTP.sys' CVE-2019-9513 Denial of Service Vulnerability
2019-08-13 00:00:00
myhack58
myhack58
threatpost
threatpost
HTTP Bugs Open Websites to DoS Attacks
2019-08-15 19:20:38
cloudfoundry
cloudfoundry
thn
thn
8 New HTTP/2 Implementation Flaws Expose Websites to DoS Attacks
2019-08-14 08:19:00
nodejsblog
nodejsblog
August 2019 Security Releases
2019-08-16 00:00:00
fortinet
fortinet
HTTP/2 Multiple DoS Attacks (VU#605641)
2019-09-03 00:00:00
mscve
mscve
HTTP/2 Server Denial of Service Vulnerability
2019-08-13 07:00:00
HTTP/2 Server Denial of Service Vulnerability
2019-08-13 07:00:00
alpinelinux
alpinelinux
ubuntucve
ubuntucve
redhatcve
redhatcve
debiancve
debiancve
cbl_mariner
cbl_mariner
CVE-2019-9513 affecting package nginx 1.16.1-2
2021-06-14 15:32:58
CVE-2019-9516 affecting package nginx 1.16.1-2
2021-06-14 15:32:58
CVE-2019-9511 affecting package nginx 1.16.1-2
2021-06-14 15:32:58
prion
prion
Code injection
2019-08-13 21:15:00
Code injection
2019-08-13 21:15:00
Design/Logic Flaw
2019-08-13 21:15:00
veracode
veracode
Denial Of Service (DoS)
2019-09-13 00:40:24
Denial Of Service (DoS)
2019-09-13 00:40:24
Denial Of Service (DoS)
2019-09-13 00:40:24
cve
cve
nginx
nginx
Excessive CPU usage in HTTP/2 with small window updates
2019-08-13 21:15:00
Excessive memory usage in HTTP/2 with zero length headers
2019-08-13 21:15:00
Excessive CPU usage in HTTP/2 with priority changes
2019-08-13 21:15:00
cert
cert
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
Related for ELSA-2019-2799