7.8
Élevée
CVE-2026-32647 NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an attacker…
Description
NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to trigger a buffer over-read or over-write to the NGINX worker memory resulting in its termination or possibly code execution, using a specially crafted MP4 file. This issue affects NGINX Open Source and NGINX Plus if it is built with the ngx_http_mp4_module module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted MP4 file with the ngx_http_mp4_module module. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Versions non publiées | |
| Red Hat Enterprise Linux AppStream (v. 10) | Versions non publiées | |
| Red Hat Enterprise Linux AppStream (v. 8) | Versions non publiées | |
| Red Hat Enterprise Linux AppStream E4S (v.9.0) | Versions non publiées | |
| Red Hat Enterprise Linux AppStream E4S (v.9.2) | Versions non publiées | |
| Red Hat Enterprise Linux AppStream EUS (v.9.4) | Versions non publiées | |
| Red Hat Enterprise Linux AppStream EUS (v.9.6) | Versions non publiées | |
| Red Hat Enterprise Linux AppStream (v. 9) | Versions non publiées | |
| Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) | Versions non publiées |
Afficher les 18 autres branches Masquer les 18 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat CodeReady Linux Builder EUS (v.9.4) | Versions non publiées | |
| Red Hat CodeReady Linux Builder EUS (v.9.6) | Versions non publiées | |
| Red Hat Hardened Images 1.30 | premières → < 1.30.0-1.hum1 | 1.30.0-1.hum1 |
| Red Hat Update Infrastructure 5 1776868842 | premières → < 1776868842 | 1776868842 |
| Red Hat Lightspeed proxy 1 | Versions non publiées | |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | Versions non publiées | |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | Versions non publiées | |
| NGINX Open Source 1.29 | 1.29.0 → < 1.29.7 | 1.29.7 |
| NGINX Open Source 1.1 | 1.1.19 → < 1.28.3 | 1.28.3 |
| NGINX Plus | Versions non publiées | |
| Red Hat Enterprise Linux 10 | Versions non publiées | |
| Red Hat Enterprise Linux 10.0 Extended Update Support | Versions non publiées | |
| Red Hat Enterprise Linux 8 8100020260401080144.489197 | premières → < 8100020260401080144.489197e6 | 8100020260401080144.489197e6 |
| Red Hat Enterprise Linux 9 9070020260407080353.9 | premières → < 9070020260407080353.9 | 9070020260407080353.9 |
| Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | Versions non publiées | |
| Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | Versions non publiées | |
| Red Hat Enterprise Linux 9.4 Extended Update Support 9040020260504195322.9 | premières → < 9040020260504195322.9 | 9040020260504195322.9 |
| Red Hat Enterprise Linux 9.6 Extended Update Support 9060020260504154614.9 | premières → < 9060020260504154614.9 | 9060020260504154614.9 |
Références
- my.f5.com my.f5.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat Enterprise Linux AppStream EUS (v. 10.0)
Les 269 CVE de Red Hat Enterprise Linux AppStream EUS (v. 10.0) →
CVE-2026-53016
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG…
7.8
Élevée
CVE-2026-56208
Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode
7.6
Élevée
CVE-2026-12329
Memory safety bug fixed in Thunderbird ESR 140.12
5.3
Moyenne
CVE-2026-12328
Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and…
8.1
Élevée