High DLA-3203-1 3 CVEs

nginx - security update

Published Nov 23, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	nginx	1.14.2-2+deb10u5

Vulnerabilities 3

High 7.1

CVE-2022-41742

NGINX ngx_http_mp4_module vulnerability CVE-2022-41742

NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to c…

F5 NGINX Plus NGINX NGINX Open Source Subscription Network devices Debian Ubuntu Azure Linux Alpine

Oct 19, 2022
High 7.0

CVE-2022-41741 Public exploit

NGINX ngx_http_mp4_module vulnerability CVE-2022-41741

NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to c…

F5 NGINX Plus NGINX Open Source Subscription NGINX Network devices Debian Ubuntu Azure Linux Alpine

Oct 19, 2022
Unscored —

CVE-2021-3618

ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protoco…

nginx nginx nginx nginx Debian Ubuntu Azure Linux Alpine

Mar 23, 2022