onyx --cves cve-2018-16845
CVE-2018-16845
- score
- <0.1
- cvss
- 6.1
- epss
- 9.8%
- published
- 2018-11-07
- kev added
- —
- first seen
nginx < 1.15.6, 1.14.1 contains a vulnerability in the ngx_http_mp4_module caused by processing specially crafted mp4 files, letting attackers cause infinite loops, crashes, or memory disclosure, exploit requires attacker to trigger processing of malicious mp4 files.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
References 14
- http://mailman.nginx.org/pipermail/nginx-announce/2018/000221.html
- https://access.redhat.com/errata/RHSA-2018:3681
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16845
- https://support.apple.com/kb/HT212818
- https://usn.ubuntu.com/3812-1/
- https://www.debian.org/security/2018/dsa-4335
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00035.html
- http://seclists.org/fulldisclosure/2021/Sep/36
- http://www.securityfocus.com/bid/105868
- http://www.securitytracker.com/id/1042039
- https://access.redhat.com/errata/RHSA-2018:3652
- https://access.redhat.com/errata/RHSA-2018:3653
- https://access.redhat.com/errata/RHSA-2018:3680
- https://lists.debian.org/debian-lts-announce/2018/11/msg00010.html