23 matches found
CLSA-2026-1784712190 Fix CVE(s): CVE-2026-42533, CVE-2026-60005
SECURITY UPDATE: heap buffer overflow in nginx worker via map+regex capture variables in script engine - debian/patches/CVE-2026-42533.patch: backport upstream commits ea47fabf55e2 Script: simplified copy capture codes, 7ac67898bdfe Script: buffer overrun protection, 326b17b00383 Script: buffer...
FreeBSD : Angie -- multiple vulnerabilities (347fe124-8f53-11f1-9f4f-3c7c3fba4204)
"The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 347fe124-8f53-11f1-9f4f-3c7c3fba4204 advisory. The Angie Software Team reports: When evaluating a string expression in which unnamed capture...
CLSA-2026-1784888515 nginx: Fix of CVE-2026-42533
CVE-2026-42533: add script engine buffer-overrun protection to fix heap overflow and info-leak via regex map capture variables...
CLSA-2026-1784800978 nginx: Fix of CVE-2026-42533
CVE-2026-42533: add script engine buffer-overrun protection to fix heap overflow and info-leak via regex map capture variables...
CLSA-2026-1784800609 nginx: Fix of CVE-2026-42533
CVE-2026-42533: add script engine buffer-overrun protection to fix heap overflow and info-leak via regex map capture variables...
CLSA-2026-1784800112 nginx: Fix of CVE-2026-42533
CVE-2026-42533: add script engine buffer-overrun protection to fix heap overflow and info-leak via regex map capture variables...
CLSA-2026-1784715967 Fix CVE(s): CVE-2026-42533
SECURITY UPDATE: heap buffer overflow and info-leak via regex map capture variables - debian/patches/CVE-2026-42533.patch: add script engine buffer-overrun protection - CVE-2026-42533...
CLSA-2026-1784632234 Fix CVE(s): CVE-2026-42533
SECURITY UPDATE: heap buffer overflow and info-leak via regex map capture variables - debian/patches/CVE-2026-42533.patch: add script engine buffer-overrun protection - CVE-2026-42533...
BIT-NGINX-GATEWAY-2026-42533 NGINX Map directive and Regex matching vulnerability
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...
Angie -- multiple vulnerabilities
The Angie Software Team reports: When evaluating a string expression in which unnamed capture variables $1, $2, etc. preceded a map directive variable whose value is determined by a regular expression, or when using a non-cacheable volatile map directive variable whose key contained a capture...
CVE-2026-42533
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...
AZL-92493 CVE-2026-42533 affecting package nginx for versions less than 1.28.3-8
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...
CVE-2026-42533: Heap-based Buffer Overflow
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...
Exploit for CVE-2026-42945
NGINX Rift Configuration Scanner Language: Chinese | English...
OESA-2026-1107 mod_security_crs security update
The base rules are provided for modsecurity by this package. Security Fixes: The OWASP core rule set CRS is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 4.22.0 and 3.3.8, the current rule 922110 has a bug when processing multipart...
OESA-2026-1105 mod_security_crs security update
The base rules are provided for modsecurity by this package. Security Fixes: The OWASP core rule set CRS is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 4.22.0 and 3.3.8, the current rule 922110 has a bug when processing multipart...
OESA-2026-1104 mod_security_crs security update
The base rules are provided for modsecurity by this package. Security Fixes: The OWASP core rule set CRS is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 4.22.0 and 3.3.8, the current rule 922110 has a bug when processing multipart...
CVE-2026-21876
The OWASP core rule set CRS is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 4.22.0 and 3.3.8, the current rule 922110 has a bug when processing multipart requests with multiple parts. When the first rule in a chain iterates over a...
UBUNTU-CVE-2026-21876
The OWASP core rule set CRS is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 4.22.0 and 3.3.8, the current rule 922110 has a bug when processing multipart requests with multiple parts. When the first rule in a chain iterates over a...
EUVD-2026-1669
The OWASP core rule set CRS is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 4.22.0 and 3.3.8, the current rule 922110 has a bug when processing multipart requests with multiple parts. When the first rule in a chain iterates over a...