Known vulnerabilities in nginx-core (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
nginx-core (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:nginx-core_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
8
Public exploits:
1
Known exploited (KEV):
0
Breakdown by Severity Chart
1.4.6-1ubuntu3.1
1.4.6-1ubuntu3.2
1.4.6-1ubuntu3.3
1.4.6-1ubuntu3.4
1.4.6-1ubuntu3.5
1.4.6-1ubuntu3.6
1.4.6-1ubuntu3.7
1.4.6-1ubuntu3.8
1.18.0-6ubuntu14.21
1.18.0-6ubuntu14.20
1.18.0-6ubuntu14.18
1.18.0-6ubuntu14.16
1.18.0-6ubuntu14.15
1.18.0-6ubuntu14.14
1.18.0-6ubuntu14.12
1.18.0-6ubuntu14.11
1.18.0-6ubuntu14.10
1.18.0-6ubuntu14.8
1.28.0-6ubuntu1
1.26.3-2ubuntu1.2
1.24.0-2ubuntu7.5
1.18.0-6ubuntu14.7
1.26.3-3ubuntu2
1.26.3-2ubuntu1
1.26.3-2ubuntu1.1
1.26.0-2ubuntu3.3
1.24.0-2ubuntu7.4
1.24.0-2ubuntu7.3
1.18.0-0ubuntu1.7
1.18.0-6ubuntu14.6
1.26.0-2ubuntu3.2
1.18.0-0ubuntu1.6
1.18.0-6ubuntu14.5
1.24.0-2ubuntu7.1
1.14.0-0ubuntu1.11
1.18.0-0ubuntu1.4
1.18.0-6ubuntu14.3
1.22.0-1ubuntu1.1
Ubuntu Pro (Infra-only)
1.10.30ubuntu0.16.04.5+esm1
1.18.0-0ubuntu1.2
1.18.0-6ubuntu2.2
1.18.0-6ubuntu8.2
1.18.0-6ubuntu14.1
1.18.0-0ubuntu1.3
1.18.0-6ubuntu11.1
1.14.0-0ubuntu1.10
1.14.0-0ubuntu1.9
1.18.0-0ubuntu1
1.17.10-0ubuntu1
1.14.0-0ubuntu1
1.9.15-0ubuntu1
1.4.6-1ubuntu3
1.4.6-1ubuntu3.9
1.16.1-0ubuntu2.1
1.15.9-0ubuntu1.2
1.14.0-0ubuntu1.7
1.10.3-0ubuntu0.16.04.5
1.16.1-0ubuntu2
1.15.5-0ubuntu2.1
1.14.0-0ubuntu1.6
1.10.3-0ubuntu0.16.04.4
1.15.9-0ubuntu1.1
Vulnerabilities (8)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU103686 - Improper Authentication CVE-2025-23419 |
CWE-287 | Low | 1.18.0-0ubuntu1.7, 1.18.0-6ubuntu14.6, 1.24.0-2ubuntu7.3, 1.26.0-2ubuntu3.2 | 06.02.2025 |
SB2025020653 SB2025020670 SB2025020671 and 17 more |
||
| #VU96020 - Out-of-bounds read CVE-2024-7347 |
CWE-125 | Medium | Ubuntu Pro (Infra-only), 1.18.0-0ubuntu1.6, 1.18.0-6ubuntu14.5, 1.24.0-2ubuntu7.1 | 14.08.2024 |
SB2024081481 SB2024081706 SB2024081707 and 25 more |
||
| #VU68495 - Out-of-bounds read CVE-2022-41742 |
CWE-125 | Medium | Ubuntu Pro (Infra-only), 1.14.0-0ubuntu1.11, 1.18.0-0ubuntu1.4, 1.18.0-6ubuntu14.3, 1.22.0-1ubuntu1.1 | 19.10.2022 |
SB2022101941 SB2022111503 SB2022111601 and 34 more |
||
| #VU68494 - Out-of-bounds read CVE-2022-41741 |
CWE-125 | Medium | Ubuntu Pro (Infra-only), 1.14.0-0ubuntu1.11, 1.18.0-0ubuntu1.4, 1.18.0-6ubuntu14.3, 1.22.0-1ubuntu1.1 | 19.10.2022 |
SB2022101941 SB2022111503 SB2022111601 and 32 more |
||
| #VU62316 - Improper input validation CVE-2020-36309 |
CWE-20 | Medium | Ubuntu Pro (Infra-only), 1.14.0-0ubuntu1.10, 1.18.0-0ubuntu1.3, 1.18.0-6ubuntu11.1, 1.18.0-6ubuntu14.1 | 14.04.2022 |
SB2021040629 SB2022041422 SB2022042817 and 2 more |
||
| #VU59319 - Origin Validation Error CVE-2021-3618 |
CWE-346 | Medium | Ubuntu Pro (Infra-only), 1.14.0-0ubuntu1.10, 1.18.0-0ubuntu1.3, 1.18.0-6ubuntu11.1, 1.18.0-6ubuntu14.1 | 09.01.2022 |
SB2022010903 SB2022010904 SB2022010905 and 37 more |
||
| #VU53543 - Off-by-one Error CVE-2021-23017 |
CWE-193 | High | 1.10.30ubuntu0.16.04.5+esm1, 1.14.0-0ubuntu1.9, 1.18.0-0ubuntu1.2, 1.18.0-6ubuntu2.2, 1.18.0-6ubuntu8.2 | 25.05.2021 |
SB2021052543 SB2021052713 SB2021052901 and 48 more |
||
| #VU46107 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2020-11724 |
CWE-444 | Medium | Ubuntu Pro (Infra-only), 1.14.0-0ubuntu1.10, 1.18.0-0ubuntu1.3, 1.18.0-6ubuntu11.1, 1.18.0-6ubuntu14.1 | 27.08.2020 |
SB2020041208 SB2020082719 SB2022041422 and 3 more |