Known vulnerabilities in nginx (Alpine package)

Software CPE: cpe:2.3:o:alpine:nginx_alpine_package:*:*:*:*:*:alpine_linux:*:*
Total vulnerabilities: 14
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting nginx (Alpine package) nginx (Alpine package) is affected by 14 known vulnerabilities: 14 medium Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU24230 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-20372
CWE-444 Medium
Available
No
1.14.2-r2, 1.14.2-r5 13.01.2020 SB2020011323
SB2020011324
SB2020021002
and 10 more
#VU20198 - Resource exhaustion
CVE-2019-9516
CWE-400 Medium
No
No
1.14.2-r1, 1.14.2-r2 13.08.2019 SB2019081323
SB2019081602
SB2019081606
and 41 more
#VU20197 - Resource exhaustion
CVE-2019-9513
CWE-400 Medium
No
No
1.14.2-r1, 1.14.2-r2 13.08.2019 SB2019081323
SB2019081326
SB2019081602
and 51 more
#VU20196 - Resource exhaustion
CVE-2019-9511
CWE-400 Medium
No
No
1.14.2-r1, 1.14.2-r2 13.08.2019 SB2019081323
SB2019081326
SB2019081602
and 55 more
#VU15745 - Resource Management Errors
CVE-2018-16843
CWE-399 Medium
No
No
1.12.2-r2 07.11.2018 SB2018110703
SB2018110908
SB2018112912
and 9 more
#VU15744 - Resource Management Errors
CVE-2018-16844
CWE-399 Medium
No
No
1.12.2-r2 07.11.2018 SB2018110703
SB2018110908
SB2018112912
and 9 more
#VU15743 - Out-of-bounds read
CVE-2018-16845
CWE-125 Medium
No
No
1.12.2-r2 07.11.2018 SB2018110703
SB2018110908
SB2018112912
and 11 more
#VU7410 - Integer overflow
CVE-2017-7529
CWE-190 Medium
Available
No
1.8.1-r2 11.07.2017 SB2017071109
SB2017071214
SB2017071305
and 12 more
#VU25 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2016-4450
CWE-829 Medium
No
No
1.6.2-r2 24.06.2016 SB2016053101
SB2016060202
SB2016060102
and 14 more
#VU32495 - Improper Access Control
CVE-2014-3616
CWE-284 Medium
No
No
1.6.2-r0 08.12.2014 SB2014120816
SB2014091704
SB2014100112
and 5 more
#VU32617 - Permissions, Privileges, and Access Controls
CVE-2013-4547
CWE-264 Medium
Available
No
1.0.15-r1 23.11.2013 SB2013112305
SB2013112013
SB2013120205
and 2 more
#VU32679 - Permissions, Privileges, and Access Controls
CVE-2013-2070
CWE-264 Medium
No
No
1.2.9-r0 20.07.2013 SB2013072001
SB2013051301
SB2013051412
and 1 more
#VU32813 - Use After Free
CVE-2012-1180
CWE-416 Medium
No
No
0.8.55-r0 18.04.2012 SB2012041803
SB2012041908
SB2012040505
and 2 more
#VU32819 - Memory corruption
CVE-2012-2089
CWE-119 Medium
No
No
1.0.15-r0 18.04.2012 SB2012041804
SB2012041911
SB2012050907
and 2 more