NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngx_http_mp4_module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted mp4 file with the ngx_http_mp4_module. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Weakness
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Nginx_open_source | F5 | 1.5.13 (including) | 1.26.2 (excluding) |
| Nginx_open_source | F5 | 1.27.0 (including) | 1.27.0 (including) |
| Nginx_plus | F5 | r27 (including) | r31 (excluding) |
| Nginx_plus | F5 | r31 (including) | r31 (including) |
| Nginx_plus | F5 | r31-p1 (including) | r31-p1 (including) |
| Nginx_plus | F5 | r32 (including) | r32 (including) |
| Red Hat Enterprise Linux 9 | RedHat | nginx:1.22-9050020250324053651.9 | * |
| Red Hat Enterprise Linux 9 | RedHat | nginx:1.24-9050020250324055038.9 | * |
| Red Hat Enterprise Linux 9 | RedHat | nginx-2:1.20.1-22.el9_6.2 | * |
| Red Hat Enterprise Linux 9.2 Extended Update Support | RedHat | nginx-1:1.20.1-14.el9_2.3 | * |
| Red Hat Enterprise Linux 9.2 Extended Update Support | RedHat | nginx:1.22-9020020250414211356.9 | * |
| Red Hat Enterprise Linux 9.4 Extended Update Support | RedHat | nginx:1.24-9040020250414212413.9 | * |
| Red Hat Enterprise Linux 9.4 Extended Update Support | RedHat | nginx:1.22-9040020250408102234.9 | * |
| Red Hat Enterprise Linux 9.4 Extended Update Support | RedHat | nginx-1:1.20.1-16.el9_4.3 | * |
| Nginx | Ubuntu | esm-infra-legacy/trusty | * |
| Nginx | Ubuntu | esm-infra/bionic | * |
| Nginx | Ubuntu | esm-infra/focal | * |
| Nginx | Ubuntu | esm-infra/xenial | * |
| Nginx | Ubuntu | focal | * |
| Nginx | Ubuntu | jammy | * |
| Nginx | Ubuntu | noble | * |
| Nginx | Ubuntu | trusty/esm | * |
| Nginx | Ubuntu | upstream | * |