Security Bulletin: IBM Aspera Shares Web Application is affected by NGINX Vulnerabilities (CVE-2019-13067)

Summary IBM Aspera Shares Web Application has addressed the following OpenSSL vulnerability. Vulnerability Details CVEID: CVE-2019-13067 DESCRIPTION: njs, used in NGINX, is vulnerable to a denial of service, caused by a buffer over-read in nxtutf8decode in nxt/nxtutf8.c. By persuading a victim to...

Security Bulletin: IBM Aspera Shares is affected by the following NGINX vulnerability (CVE-2019-13617)

Summary IBM Aspera Shares has addressed the following NGINX vulnerability Vulnerability Details CVEID: CVE-2019-13617 DESCRIPTION: njs, used in NGINX, is vulnerable to a denial of service, caused by a heap-based buffer over-read in nxtvsprintf in nxt/nxtsprintf.c during error handling. By...

Security Bulletin: Aspera Web Shares application is affected by NGINX Vulnerabilities (CVE-2019-12208, CVE-2019-12207)

Summary IBM Aspera Shares has addressed the following NGINX vulnerabilities. Vulnerability Details CVEID: CVE-2019-12208 DESCRIPTION: NGINX njs is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the njsfunctionnativecall function in njs/njsfunction.c. By sending...

EulerOS 2.0 SP8 : nginx (EulerOS-SA-2020-1167)

According to the version of the nginx packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - NGINX before 1.17.7, with certain errorpage configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read...

NGINX allows HTTP request smuggling

Summary Under some special configuration NGINX permits HTTP request smuggling which can lead an attacker to access unauthorized web pages. Impact None. Our products are not affected by this issue because the configuration used is not vulnerable. Mitigation Not required Solution Not required...

Huawei EulerOS: Security Advisory for nginx (EulerOS-SA-2020-1167)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : nginx (EulerOS-SA-2020-1119)

According to the version of the nginx packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - NGINX before 1.17.7, with certain errorpage configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read...

Huawei EulerOS: Security Advisory for nginx (EulerOS-SA-2020-1119)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Photon OS 3.0: Nginx PHSA-2020-3.0-0057

An update of the nginx package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0057. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133808;...

ingress-nginx auth-type basic annotation vulnerability

A security issue was discovered in ingress-nginx versions older than v0.28.0. The issue is of medium severity, and upgrading is encouraged to fix the vulnerability. Am I vulnerable? The vulnerability exists only if the annotation nginx.ingress.kubernetes.io/auth-type: basic is used. How do I...

PT-2020-6523 · Unknown · Ingress-Nginx

Name of the Vulnerable Software and Affected Versions: ingress-nginx versions prior to 0.28.0 Description: The issue is related to errors in processing hyperlinks in the ingress-nginx controller in a Kubernetes cluster. This can be exploited by a remote attacker to gain access to create, modify, ...

Important Photon OS Security Update - PHSA-2020-3.0-0057

Updates of 'nginx', 'yarn', 'bash', 'libsolv', 'python2' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2020-0057

Updates of 'python2', 'bash', 'yarn', 'libsolv', 'nginx' packages of Photon OS have been released...

Photon OS 2.0: Nginx PHSA-2020-2.0-0207

An update of the nginx package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0207. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133689...

Critical Photon OS Security Update - PHSA-2020-0207

Updates of 'envoy', 'ansible', 'libarchive', 'nginx' packages of Photon OS have been released...

Photon OS 1.0: Nginx PHSA-2020-1.0-0276

An update of the nginx package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0276. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133684...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0276

An update of 'libvirt', 'python3', 'nginx' packages of Photon OS has been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0207

An update of 'envoy', 'nginx', 'libarchive', 'ansible' packages of Photon OS has been released...

openSUSE Security Update : nginx (openSUSE-2020-204)

This update for nginx fixes the following issues : - CVE-2019-20372: Fixed an HTTP request smuggling with certain errorpage configurations which could have allowed unauthorized web page reads bsc1160682. This update was imported from the SUSE:SLE-15-SP1:Update update project. C Tenable Network...

OPENSUSE-SU-2020:0204-1 Security update for nginx

This update for nginx fixes the following issues: - CVE-2019-20372: Fixed an HTTP request smuggling with certain errorpage configurations which could have allowed unauthorized web page reads bsc1160682. This update was imported from the SUSE:SLE-15-SP1:Update update project...