Medium DLA-4091-1 2 CVEs

nginx - security update

Published Mar 25, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	nginx	1.18.0-6.1+deb11u4

Vulnerabilities 2

Medium 4.7

CVE-2024-7347

NGINX MP4 module vulnerability

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with…

F5 NGINX Plus NGINX Open Source nginx Network devices Debian Ubuntu Azure Linux Alpine

Aug 14, 2024
Medium 4.3

CVE-2025-23419 Public exploit

TLS Session Resumption Vulnerability

When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://ngin…

F5 NGINX Plus NGINX Open Source nginx Network devices Debian Ubuntu Azure Linux Alpine Wolfi

Feb 5, 2025