Lucene search

K
redosRedosROS-20240827-15
HistoryAug 27, 2024 - 12:00 a.m.

ROS-20240827-15

2024-08-2700:00:00
redos.red-soft.ru
28
nginx
vulnerability
remote access
web servers
unauthorized access

CVSS3

4.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

CVSS4

5.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/SC:N/VI:N/SI:N/VA:H/SA:N

AI Score

6.5

Confidence

Low

A vulnerability in the ngx_http_v4_module module of the NGINX Plus and NGINX OSS web servers is related to reading out-of-bounds
memory. Exploitation of the vulnerability could allow an attacker acting remotely to gain
unauthorized access to protected information

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64nginx< 1.26.2-1UNKNOWN

CVSS3

4.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

CVSS4

5.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/SC:N/VI:N/SI:N/VA:H/SA:N

AI Score

6.5

Confidence

Low