Photon OS 4.0: Openresty PHSA-2024-4.0-0539

An update of the openresty package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0539. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2024-39702

A flaw was found in the OpenResty package. Affected versions of this package are vulnerable to denial of service DoS through the string hashing function. This flaw allows an attacker to cause excessive resource usage and potentially lead to a denial of service with relatively few incoming request...

CVE-2024-39702

In ljstrhash.c in OpenResty 1.19.3.1 through 1.25.3.1, the string hashing function used during string interning allows HashDoS Hash Denial of Service attacks. An attacker could cause excessive resource usage during proxy operations via crafted requests, potentially leading to a denial of service...

PT-2024-28641 · Openresty · Openresty

Name of the Vulnerable Software and Affected Versions: OpenResty versions 1.19.3.1 through 1.25.3.1 Description: The string hashing function in OpenResty allows HashDoS Hash Denial of Service attacks, which can cause excessive resource usage during proxy operations via crafted requests. This can...

CVE-2024-39702

In ljstrhash.c in OpenResty 1.19.3.1 through 1.25.3.1, the string hashing function used during string interning allows HashDoS Hash Denial of Service attacks. An attacker could cause excessive resource usage during proxy operations via crafted requests, potentially leading to a denial of service...

OpenResty 安全漏洞

OpenResty is an American OpenResty open source web application server based on Nginx and Lua. A security vulnerability exists in OpenResty, which stems from a hash denial of service vulnerability discovered in ljstrhash.c. The vulnerability is caused by a hash denial of service vulnerability...

CVE-2024-39702

OpenResty 1.19.3.1 through 1.25.3.1 contains a HashDoS vulnerability in lj_str_hash.c (string hashing during interning). The issue is limited to the OpenResty fork in openresty/luajit2; LuaJIT/LuaJIT repo is unaffected. Attackers can cause excessive resource usage during proxy operations with cra...

CVE-2024-39702

In ljstrhash.c in OpenResty 1.19.3.1 through 1.25.3.1, the string hashing function used during string interning allows HashDoS Hash Denial of Service attacks. An attacker could cause excessive resource usage during proxy operations via crafted requests, potentially leading to a denial of service...

CVE-2024-39702

In ljstrhash.c in OpenResty 1.19.3.1 through 1.25.3.1, the string hashing function used during string interning allows HashDoS Hash Denial of Service attacks. An attacker could cause excessive resource usage during proxy operations via crafted requests, potentially leading to a denial of service...

BIT-OPENRESTY-2020-36309

ngxhttpluamodule aka lua-nginx-module before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header...

Important Photon OS Security Update - PHSA-2024-3.0-0709

Updates of 'openresty' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2024-4.0-0539

Updates of 'openresty', 'sudo' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2024-5.0-91-0185

Updates of 'openresty', 'squid', 'sudo' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2024-5.0-0185

Updates of 'squid', 'openresty', 'sudo' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2023-3.0-0617

Updates of 'openresty', 'grub2', 'perl', 'mysql' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2023-5.0-0056

Updates of 'openresty', 'mysql' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2023-4.0-0435

Updates of 'openresty', 'mysql' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2023-5.0-91-0056

Updates of 'openresty', 'mysql' packages of Photon OS have been released...

Exploit for Authentication Bypass by Spoofing in Apache Apisix

POCs Collected POCs CVE-2022-24112 To create a test...

Ubuntu 16.04 ESM : nginx vulnerability (USN-5371-3)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5371-3 advisory. USN-5371-1 and USN-5371-2 fixed several vulnerabilities in nginx. This update provides the corresponding update for CVE-2020-11724 for Ubuntu 16.04 ESM. Tenable h...