2018-11-07 15:29:00 2019-09-11 02:15:10

nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption. This issue affects nginx compiled with the ngx_http_v2_module (not compiled by default) if the 'http2' option of the 'listen' directive is used in a configuration file.

Vector

NETWORK

Complexity

LOW

Authentication

NONE

Confidentiality

NONE

Integrity

NONE

Availability

COMPLETE
Nginx Nginx 1.15.4 (not an official CPE) Nginx Nginx 1.15.3 (not an official CPE) Nginx Nginx 1.15.2 (not an official CPE) Nginx Nginx 1.15.1 (not an official CPE) Nginx Nginx 1.15.0 (not an official CPE) Nginx Nginx 1.14.2 (not an official CPE) Nginx Nginx 1.14.0 (not an official CPE) Nginx Nginx 1.13.12 (not an official CPE) Nginx Nginx 1.13.11 (not an official CPE) Nginx Nginx 1.13.10 (not an official CPE) Nginx Nginx 1.13.9 (not an official CPE) Nginx Nginx 1.13.8 (not an official CPE) Nginx Nginx 1.13.7 (not an official CPE) Nginx Nginx 1.13.6 (not an official CPE) Nginx Nginx 1.13.5 (not an official CPE) Nginx Nginx 1.13.4 (not an official CPE) Nginx Nginx 1.13.3 (not an official CPE) Nginx Nginx 1.13.2 (not an official CPE) Nginx Nginx 1.13.1 (not an official CPE) Nginx Nginx 1.13.0 (not an official CPE) Nginx Nginx 1.12.2 (not an official CPE) Nginx Nginx 1.12.1 (not an official CPE) Nginx Nginx 1.12.0 (not an official CPE) Nginx Nginx 1.11.13 (not an official CPE) Nginx Nginx 1.11.12 (not an official CPE) Nginx Nginx 1.11.11 (not an official CPE) Nginx Nginx 1.11.10 (not an official CPE) Nginx Nginx 1.11.9 (not an official CPE) Nginx Nginx 1.11.8 (not an official CPE) Nginx Nginx 1.11.7 (not an official CPE) Nginx Nginx 1.11.6 (not an official CPE) Nginx Nginx 1.11.5 (not an official CPE) Nginx Nginx 1.11.4 (not an official CPE) Nginx Nginx 1.11.3 (not an official CPE) Nginx Nginx 1.11.2 (not an official CPE) Nginx Nginx 1.11.1 (not an official CPE) Nginx Nginx 1.11.0 (not an official CPE) Nginx Nginx 1.10.3 (not an official CPE) Nginx Nginx 1.10.2 (not an official CPE) Nginx Nginx 1.10.1 (not an official CPE) Nginx Nginx 1.10.0 (not an official CPE) Nginx Nginx 1.9.15 (not an official CPE) Nginx Nginx 1.9.14 (not an official CPE) Nginx Nginx 1.9.13 (not an official CPE) Nginx Nginx 1.9.12 (not an official CPE) Nginx Nginx 1.9.11 (not an official CPE) Nginx Nginx 1.9.10 (not an official CPE) Nginx Nginx 1.9.9 (not an official CPE) Nginx Nginx 1.9.8 (not an official CPE) Nginx Nginx 1.9.7 (not an official CPE) Nginx Nginx 1.9.6 (not an official CPE) Nginx Nginx 1.9.5 (not an official CPE) Nginx Nginx 1.15.5 (not an official CPE)