CLSA-2022-1669065389 nginx: Fix of 2 CVEs

🗓️ 21 Nov 2022 21:16:29Reported by GoogleType

osv🔗 osv.dev👁 5 Views

Nginx patch fixes two CVEs for memory corruption and memory disclosure in the ngx_http_mp4_module.

Reporter	Title	Published	Views	Family All 180
IBM Security Bulletins	Security Bulletin: A vulnerability in nginx may affect IBM Robotic Process Automation for Cloud Pak resulting in a denial of service (CVE-2022-41741, CVE-2022-41742)	4 Jan 202319:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for Nov 2024	26 Nov 202409:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in F5 NGINX	2 May 202320:56	–	ibm
GithubExploit	Exploit for Type Confusion in Google Chrome	10 Feb 202523:04	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in F5 Nginx	7 May 202523:26	–	githubexploit
FreeBSD	nginx -- Two vulnerabilities	19 Oct 202200:00	–	freebsd
Tenable Nessus	Amazon Linux 2022 : nginx, nginx-all-modules, nginx-core (ALAS2022-2023-270)	25 Jan 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : nginx, nginx-all-modules, nginx-core (ALAS2023-2023-099)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : nginx (ALASNGINX1-2023-001)	27 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : nginx (ALAS-2023-1665)	24 Jan 202300:00	–	nessus