Jonathan Looney discovered that nginx incorrectly handled the HTTP/2 implementation. A remote attacker could possibly use this issue to consume resources, leading to a denial of service.
{ "binaries": [ { "binary_version": "1.10.3-0ubuntu0.16.04.4", "binary_name": "nginx" }, { "binary_version": "1.10.3-0ubuntu0.16.04.4", "binary_name": "nginx-common" }, { "binary_version": "1.10.3-0ubuntu0.16.04.4", "binary_name": "nginx-core" }, { "binary_version": "1.10.3-0ubuntu0.16.04.4", "binary_name": "nginx-extras" }, { "binary_version": "1.10.3-0ubuntu0.16.04.4", "binary_name": "nginx-full" }, { "binary_version": "1.10.3-0ubuntu0.16.04.4", "binary_name": "nginx-light" } ], "availability": "No subscription required" }
{ "cves": [ { "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "medium", "type": "Ubuntu" } ], "id": "CVE-2019-9511" }, { "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "medium", "type": "Ubuntu" } ], "id": "CVE-2019-9513" }, { "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "medium", "type": "Ubuntu" } ], "id": "CVE-2019-9516" } ], "ecosystem": "Ubuntu:16.04:LTS" }
{ "binaries": [ { "binary_version": "1.14.0-0ubuntu1.4", "binary_name": "libnginx-mod-http-auth-pam" }, { "binary_version": "1.14.0-0ubuntu1.4", "binary_name": "libnginx-mod-http-cache-purge" }, { "binary_version": "1.14.0-0ubuntu1.4", "binary_name": "libnginx-mod-http-dav-ext" }, { "binary_version": "1.14.0-0ubuntu1.4", "binary_name": "libnginx-mod-http-echo" }, { "binary_version": "1.14.0-0ubuntu1.4", "binary_name": "libnginx-mod-http-fancyindex" }, { "binary_version": "1.14.0-0ubuntu1.4", "binary_name": "libnginx-mod-http-geoip" }, { "binary_version": "1.14.0-0ubuntu1.4", "binary_name": "libnginx-mod-http-headers-more-filter" }, { "binary_version": "1.14.0-0ubuntu1.4", "binary_name": "libnginx-mod-http-image-filter" }, { "binary_version": "1.14.0-0ubuntu1.4", "binary_name": "libnginx-mod-http-lua" }, { "binary_version": "1.14.0-0ubuntu1.4", "binary_name": "libnginx-mod-http-ndk" }, { "binary_version": "1.14.0-0ubuntu1.4", "binary_name": "libnginx-mod-http-perl" }, { "binary_version": "1.14.0-0ubuntu1.4", "binary_name": "libnginx-mod-http-subs-filter" }, { "binary_version": "1.14.0-0ubuntu1.4", "binary_name": "libnginx-mod-http-uploadprogress" }, { "binary_version": "1.14.0-0ubuntu1.4", "binary_name": "libnginx-mod-http-upstream-fair" }, { "binary_version": "1.14.0-0ubuntu1.4", "binary_name": "libnginx-mod-http-xslt-filter" }, { "binary_version": "1.14.0-0ubuntu1.4", "binary_name": "libnginx-mod-mail" }, { "binary_version": "1.14.0-0ubuntu1.4", "binary_name": "libnginx-mod-nchan" }, { "binary_version": "1.14.0-0ubuntu1.4", "binary_name": "libnginx-mod-rtmp" }, { "binary_version": "1.14.0-0ubuntu1.4", "binary_name": "libnginx-mod-stream" }, { "binary_version": "1.14.0-0ubuntu1.4", "binary_name": "nginx" }, { "binary_version": "1.14.0-0ubuntu1.4", "binary_name": "nginx-common" }, { "binary_version": "1.14.0-0ubuntu1.4", "binary_name": "nginx-core" }, { "binary_version": "1.14.0-0ubuntu1.4", "binary_name": "nginx-extras" }, { "binary_version": "1.14.0-0ubuntu1.4", "binary_name": "nginx-full" }, { "binary_version": "1.14.0-0ubuntu1.4", "binary_name": "nginx-light" } ], "availability": "No subscription required" }
{ "cves": [ { "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "medium", "type": "Ubuntu" } ], "id": "CVE-2019-9511" }, { "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "medium", "type": "Ubuntu" } ], "id": "CVE-2019-9513" }, { "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "medium", "type": "Ubuntu" } ], "id": "CVE-2019-9516" } ], "ecosystem": "Ubuntu:18.04:LTS" }