Denial Of Service (DoS)

2022-10-2010:38:13

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

5.1%

JSON

nginx is vulnerable to denial of service. The vulnerability exists due to a memory corruption in ngx_http_mp4_module when the mp4 directive is used in the configuration file which allows an attacker to cause an application crash using a specially crafted audio or video file.

CPENameOperatorVersion
nginx:edgeeq1.20.1-r4
nginx:edgeeq1.22.0-r5
nginx:edgeeq1.22.0-r1
nginx:edgeeq1.22.0-r3
nginx:edgeeq1.20.1-r2
nginx:edgeeq1.20.1-r3
nginx:edgeeq1.18.0-r0
nginx:edgeeq1.20.2-r1
nginx:edgeeq1.20.1-r5
nginx:edgeeq1.20.1-r9

Name	Operator	Version
nginx:edge	eq	1.20.1-r4
nginx:edge	eq	1.22.0-r5
nginx:edge	eq	1.22.0-r1
nginx:edge	eq	1.22.0-r3
nginx:edge	eq	1.20.1-r2
nginx:edge	eq	1.20.1-r3
nginx:edge	eq	1.18.0-r0
nginx:edge	eq	1.20.2-r1
nginx:edge	eq	1.20.1-r5
nginx:edge	eq	1.20.1-r9