DeutschShown in its original language — a full translation is planned for a future version.
NGINX und NGINX Plus: Mehrere Schwachstellen
view advisory published 2022-10-19
Ein lokaler Angreifer kann mehrere Schwachstellen in NGINX Plus und NGINX ausnutzen, um einen Denial of Service Angriff durchzuführen und vertrauliche Informationen offenzulegen oder sonstige Auswirkungen zu verursachen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-41743US | high7.0 | — | ||
NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_hls_module that might allow a local attacker to corrupt NGINX worker memory, resulting in i… | ||||
| CVE-2022-41742US | high7.1 | — | ||
NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnera… | ||||
| CVE-2022-41741US | high7.8 | Exploit | ||
NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnera… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2026-5599 vom 2026-03-26external
- Red Hat Security Advisory RHSA-2025:7402 vom 2025-05-13external
- Red Hat Security Advisory RHSA-2025:7546 vom 2025-05-14external
- Red Hat Security Advisory RHSA-2025:7619 vom 2025-05-14external
- Amazon Linux Security Advisory ALASNGINX1-2023-001 vom 2023-09-28external
- Amazon Linux Security Advisory ALAS-2023-270 vom 2023-01-25external
- Amazon Linux Security Advisory ALAS-2023-1665 vom 2023-01-24external
- Oracle Linux Security Advisory ELSA-2025-7402 vom 2025-05-23external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan