GCVE-110-MAGEIA-2018-459

Advisory Published

Vulnetix · Advisory published November 17, 2018

nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption (CVE-2018-16843). nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive CPU usage (CVE-2018-16844). nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an attacker to cause infinite loop in a worker process, cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted mp4 file (CVE-2018-16845).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	nginx	0 (affected), 1.10.3-1.2.mga6 (unaffected)	—

Aliases

CVE-2018-16845

References

Updated nginx package fixes security vulnerabilities

advisory

Updated nginx package fixes security vulnerabilities

issue

Browse GCVE Records

73,053 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON