From ade182e4d933366fc691757539f6fef2b7f1830f Mon Sep 17 00:00:00 2001 From: "Sergey A. Osokin" Date: Wed, 19 Oct 2022 09:53:38 -0400 Subject: [PATCH] security/vuxml: document nginx vulnerabilities Document CVE-2022-41741, CVE-2022-41742 --- security/vuxml/vuln-2022.xml | 35 +++++++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) diff --git a/security/vuxml/vuln-2022.xml b/security/vuxml/vuln-2022.xml index 67055630e7fed..aea646c9ae406 100644 --- a/security/vuxml/vuln-2022.xml +++ b/security/vuxml/vuln-2022.xml @@ -1,3 +1,38 @@ + + nginx -- Two vulnerabilities + + + nginx + 1.0.71.22.1 + + + nginx-devel + 1.1.31.23.2 + + + + +

NGINX Development Team reports:

+
+

Two security issues were identified in the ngx_http_mp4_module, + which might allow an attacker to cause a worker process crash + or worker process memory disclosure by using a specially crafted + mp4 file, or might have potential other impact (CVE-2022-41741, + CVE-2022-41742).

+
+ + + + CVE-2022-41741 + CVE-2022-41742 + https://mailman.nginx.org/archives/list/nginx@nginx.org/thread/F7TMIHDNNU3M52GYS23UWDWW2R2BLVVH/ + + + 2022-10-19 + 2022-10-19 + + + git -- Multiple vulnerabilities