NGINX Open Source Subscription vulnerabilities

2 known vulnerabilities in NGINX Open Source Subscription from F5. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  NGINX: Out-of-bounds Write

  CVE-2022-41742Oct 19, 2022F5EPSS 1.18%

  NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to ca

• 7.8 High severity

  NGINX: Out-of-bounds Write

  CVE-2022-41741Oct 19, 2022F5

  NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to co