Skip to content
OpenAdvisories
Unscored DSA-2434-1 1 CVE

nginx - sensitive information leak

Published Mar 19, 2012 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 nginx 0.7.67-3+squeeze2

Vulnerabilities 1

  • Unscored —
    CVE-2012-1180 EPSS 11%

    Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensit…