USN-7014-1: nginx vulnerability

🗓️ 16 Sep 2024 12:02:52Reported by UbuntuType

ubuntu🔗 ubuntu.com👁 257 Views

Nginx vulnerability allows remote attack to crash server via malformed mp4 files causing denial of service.

Reporter	Title	Published	Views	Family All 184
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	19 Dec 202416:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Nginx affects IBM Integrated Analytics System (Sailfish)[CVE-2023-44487, CVE-2024-7347].	17 May 202509:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Nginx	28 Oct 202419:37	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in nginx affects IBM Robotic Process Automatin for Cloud Pak and may result in a denial of service (CVE-2024-7347)	28 Jan 202522:08	–	ibm
FreeBSD	nginx -- Vulnerability in the ngx_http_mp4_module	14 Aug 202400:00	–	freebsd
Tenable Nessus	Amazon Linux 2023 : nginx, nginx-all-modules, nginx-core (ALAS2023-2024-707)	9 Sep 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : nginx (ALASNGINX1-2024-007)	9 Sep 202400:00	–	nessus
Tenable Nessus	AlmaLinux 9 : nginx:1.22 (ALSA-2025:3261)	31 Mar 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : nginx (ALSA-2025:7402)	21 May 202500:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	20.04	any	libnginx-mod-http-auth-pam	1.18.0-0ubuntu1.6	libnginx-mod-http-auth-pam_1.18.0-0ubuntu1.6_any.deb
Ubuntu	22.04	any	libnginx-mod-http-auth-pam	1.18.0-6ubuntu14.5	libnginx-mod-http-auth-pam_1.18.0-6ubuntu14.5_any.deb
Ubuntu	24.04	any	libnginx-mod-http-geoip	1.24.0-2ubuntu7.1	libnginx-mod-http-geoip_1.24.0-2ubuntu7.1_any.deb

16 Sep 2024 12:02Current

7.1High risk

Vulners AI Score7.1

CVSS 3.14.7

CVSS 45.7

EPSS0.00202

SSVC