High DSA-4335-1 3 CVEs

nginx - security update

Published Nov 8, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	nginx	1.10.3-1+deb9u2

Vulnerabilities 3

High 8.2

CVE-2018-16845

nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an attacker to c…

[UNKNOWN] nginx nginx nginx Debian Ubuntu Alpine

Nov 7, 2018
Medium 5.3

CVE-2018-16843 Public exploit EPSS 48%

nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessiv…

[UNKNOWN] nginx nginx nginx Debian Ubuntu Alpine

Nov 7, 2018
Medium 5.3

CVE-2018-16844 EPSS 13%

nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessiv…

[UNKNOWN] nginx nginx nginx Debian Ubuntu Alpine

Nov 7, 2018