FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-11-19 19:12:13 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
676d4f16-4fb3-11ed-a374-8c164567ca3cnginx -- Two vulnerabilities

NGINX Development Team reports:

Two security issues were identified in the ngx_http_mp4_module, which might allow an attacker to cause a worker process crash or worker process memory disclosure by using a specially crafted mp4 file, or might have potential other impact (CVE-2022-41741, CVE-2022-41742).


Discovery 2022-10-19
Entry 2022-10-19
nginx
>= 1.0.7 lt 1.22.1

nginx-devel
>= 1.1.3 lt 1.23.2

CVE-2022-41741
CVE-2022-41742
https://mailman.nginx.org/archives/list/nginx@nginx.org/thread/F7TMIHDNNU3M52GYS23UWDWW2R2BLVVH/