Vulnerability of the ngx_http_v3_module in NGINX HTTP servers; NGINX Open Source platform for application monitoring and management; NGINX Ingress Controller, NGINX Gateway Fabric server controller; NGINX Instance Manager automation platform. These tools allow attackers to bypass security restrictions, execute arbitrary code, or cause service failures.

The vulnerability of the ngxhttpv3module in the NGINX HTTP server, the NGINX Ingress Controller for application monitoring and management, the NGINX Gateway Fabric for web server controllers, and the NGINX Instance Manager for automation platforms are related to the ability to exploit memory afte...

CVE-2022-41742

A vulnerability was found in NGINX’s module, ngxhttpmp4module. This flaw allows a local attacker to cause a worker process crash or might result in worker process memory disclosure by using a specially crafted audio or video file. The issue affects only NGINX products built with ngxhttpmp4module...

DEBIAN-CVE-2012-2089

Buffer overflow in ngxhttpmp4module.c in the ngxhttpmp4module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote attackers to cause a denial of service memory overwrite or possibly execute arbitrary code via a crafted MP4 file...