Lucene search
UbuntuUSN-4099-1HistoryAug 15, 2019 - 12:00 a.m.
nginx vulnerabilities
2019-08-1500:00:00
ubuntu.com
111
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.7 High
AI Score
Confidence
High
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.097 Low
EPSS
Percentile
94.7%
Releases
- Ubuntu 19.04
- Ubuntu 18.04 ESM
- Ubuntu 16.04 ESM
Packages
- nginx - small, powerful, scalable web/proxy server
Details
Jonathan Looney discovered that nginx incorrectly handled the HTTP/2
implementation. A remote attacker could possibly use this issue to consume
resources, leading to a denial of service.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 19.04 | noarch | nginx-common | < 1.15.9-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 19.04 | noarch | libnginx-mod-http-auth-pam | < 1.15.9-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 19.04 | noarch | libnginx-mod-http-auth-pam-dbgsym | < 1.15.9-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 19.04 | noarch | libnginx-mod-http-cache-purge | < 1.15.9-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 19.04 | noarch | libnginx-mod-http-cache-purge-dbgsym | < 1.15.9-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 19.04 | noarch | libnginx-mod-http-dav-ext | < 1.15.9-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 19.04 | noarch | libnginx-mod-http-dav-ext-dbgsym | < 1.15.9-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 19.04 | noarch | libnginx-mod-http-echo | < 1.15.9-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 19.04 | noarch | libnginx-mod-http-echo-dbgsym | < 1.15.9-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 19.04 | noarch | libnginx-mod-http-fancyindex | < 1.15.9-0ubuntu1.1 | UNKNOWN |
Related
nessus
nessus
Rocky Linux 8 : nginx:1.14 (RLSA-2019:2799)
2023-11-06 00:00:00
Amazon Linux AMI : nginx (ALAS-2019-1299) (0-Length Headers Leak) (Data Dribble) (Resource Loop)
2019-10-04 00:00:00
EulerOS 2.0 SP2 : nginx (EulerOS-SA-2020-2372)
2020-11-03 00:00:00
rocky
rocky
nginx:1.14 security update
2019-09-17 08:45:10
nodejs:10 security update
2019-09-30 07:07:29
openvas
openvas
nginx HTTP/2 Multiple Vulnerablilities
2019-08-27 00:00:00
Ubuntu Update for nginx USN-4099-1
2019-08-16 00:00:00
Debian Security Advisory DSA 4505-1 (nginx - security update)
2019-08-24 00:00:00
mageia
mageia
Updated nginx packages fix security vulnerabilities
2019-11-30 16:06:06
Updated nghttp2 packages fix security vulnerabilities
2019-09-28 04:05:09
oraclelinux
oraclelinux
nginx:1.14 security update
2019-09-19 00:00:00
nghttp2 security update
2019-09-10 00:00:00
nghttp2 security update
2020-07-06 00:00:00
redhat
redhat
(RHSA-2019:2799) Important: nginx:1.14 security update
2019-09-17 08:45:10
(RHSA-2019:2775) Important: rh-nginx114-nginx security update
2019-09-16 12:43:00
(RHSA-2019:2746) Important: rh-nginx112-nginx security update
2019-09-12 11:30:03
fedora
fedora
[SECURITY] Fedora 30 Update: nginx-1.16.1-1.fc30
2019-08-22 01:18:25
[SECURITY] Fedora 29 Update: nghttp2-1.39.2-1.fc29
2019-08-27 18:38:08
[SECURITY] Fedora 30 Update: nghttp2-1.39.2-1.fc30
2019-08-23 01:27:34
osv
osv
Important: nginx:1.14 security update
2019-09-17 08:45:10
Important: nginx:1.14 security update
2019-09-17 08:45:10
nginx - security update
2019-08-22 00:00:00
archlinux
archlinux
[ASA-201908-12] nginx-mainline: denial of service
2019-08-16 00:00:00
[ASA-201908-13] nginx: denial of service
2019-08-16 00:00:00
[ASA-201908-17] libnghttp2: denial of service
2019-08-27 00:00:00
freebsd
freebsd
NGINX -- Multiple vulnerabilities
2019-08-13 00:00:00
nghttp2 -- multiple vulnerabilities
2019-08-13 00:00:00
Node.js -- multiple vulnerabilities
2019-08-16 00:00:00
suse
suse
Security update for nginx (moderate)
2019-10-06 00:00:00
Security update for nghttp2 (moderate)
2019-10-01 00:00:00
Security update for nghttp2 (moderate)
2019-10-01 00:00:00
hackerone
hackerone
Localize: Nginx version is disclosed in HTTP response
2020-01-26 21:54:31
almalinux
almalinux
Important: nginx:1.14 security update
2019-09-17 08:45:10
Important: nodejs:10 security update
2019-09-30 07:07:29
debian
debian
[SECURITY] [DSA 4505-1] nginx security update
2019-08-22 19:38:21
[SECURITY] [DSA 4511-1] nghttp2 security update
2019-09-01 21:08:06
[SECURITY] [DSA 4669-1] nodejs security update
2020-04-29 21:05:57
amazon
amazon
Important: nginx
2019-09-30 21:06:00
Important: nghttp2
2019-09-30 21:03:00
Important: nghttp2
2019-10-08 21:43:00
f5
f5
ibm
ibm
githubexploit
githubexploit
Exploit for Uncontrolled Resource Consumption in F5 Nginx
2020-12-22 10:16:11
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0342
2023-02-28 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package node version 10.16.3-alt1
2019-08-30 00:00:00
symantec
symantec
Nginx Vulnerabilities Jul 2017 - Oct 2019
2020-05-06 18:48:22
Microsoft Windows 'HTTP.sys' CVE-2019-9511 Denial of Service Vulnerability
2019-08-13 00:00:00
Microsoft Windows 'HTTP.sys' CVE-2019-9513 Denial of Service Vulnerability
2019-08-13 00:00:00
cloudfoundry
cloudfoundry
thn
thn
8 New HTTP/2 Implementation Flaws Expose Websites to DoS Attacks
2019-08-14 08:19:00
nodejsblog
nodejsblog
August 2019 Security Releases
2019-08-16 00:00:00
threatpost
threatpost
HTTP Bugs Open Websites to DoS Attacks
2019-08-15 19:20:38
myhack58
myhack58
fortinet
fortinet
HTTP/2 Multiple DoS Attacks (VU#605641)
2019-09-03 00:00:00
mscve
mscve
HTTP/2 Server Denial of Service Vulnerability
2019-08-13 07:00:00
HTTP/2 Server Denial of Service Vulnerability
2019-08-13 07:00:00
redhatcve
redhatcve
ubuntucve
ubuntucve
alpinelinux
alpinelinux
debiancve
debiancve
cbl_mariner
cbl_mariner
CVE-2019-9513 affecting package nginx 1.16.1-2
2021-06-14 15:32:58
CVE-2019-9511 affecting package nginx 1.16.1-2
2021-06-14 15:32:58
CVE-2019-9516 affecting package nginx 1.16.1-2
2021-06-14 15:32:58
cve
cve
veracode
veracode
Denial Of Service (DoS)
2019-09-13 00:40:24
Denial Of Service (DoS)
2019-09-13 00:40:24
Denial Of Service (DoS)
2019-09-13 00:40:24
prion
prion
Code injection
2019-08-13 21:15:00
Code injection
2019-08-13 21:15:00
Design/Logic Flaw
2019-08-13 21:15:00
nginx
nginx
Excessive CPU usage in HTTP/2 with small window updates
2019-08-13 21:15:00
Excessive memory usage in HTTP/2 with zero length headers
2019-08-13 21:15:00
Excessive CPU usage in HTTP/2 with priority changes
2019-08-13 21:15:00
cert
cert
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.7 High
AI Score
Confidence
High
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.097 Low
EPSS
Percentile
94.7%
Related for USN-4099-1