Known vulnerabilities in nginx-debuginfo

Vendor: SUSE
Software CPE: cpe:2.3:o:suse:nginx-debuginfo:*:*:*:*:*:suse_linux:*:*
Total vulnerabilities: 22
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting nginx-debuginfo nginx-debuginfo is affected by 22 known vulnerabilities: 2 critical, 6 high, 12 medium, 2 low Critical High Medium Low

Vulnerabilities (22)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137847 - Heap-based Buffer Overflow
CVE-2026-42533
CWE-122 High
No
No
1.21.5-150400.3.25.1, 1.21.5-150600.10.27.1 16.07.2026 SB2026071606
SB20260721112
SB20260721113
and 10 more
#VU134864 - Out-of-bounds read
CVE-2026-48142
CWE-125 Medium
No
No
1.21.5-150400.3.25.1, 1.21.5-150600.10.24.1 18.06.2026 SB2026061844
SB2026061845
SB2026061846
and 10 more
#VU134861 - Heap-based Buffer Overflow
CVE-2026-42055
CWE-122 High
No
No
1.21.5-150400.3.25.1, 1.21.5-150600.10.24.1 18.06.2026 SB2026061844
SB2026061845
SB2026061846
and 13 more
#VU132220 - Heap-based Buffer Overflow
CVE-2026-9256
CWE-122 Critical
Available
No
1.21.5-150400.3.20.1, 1.21.5-150600.10.21.1 25.05.2026 SB2026052502
SB2026052504
SB2026052505
and 12 more
#VU131379 - Use After Free
CVE-2026-40701
CWE-416 Medium
No
No
1.21.5-150400.3.20.1, 1.21.5-150600.10.18.1 14.05.2026 SB2026051401
SB2026051497
SB2026051498
and 12 more
#VU131377 - Heap-based Buffer Overflow
CVE-2026-42945
CWE-122 Critical
Available
Exploited
1.21.5-150400.3.20.1, 1.21.5-150600.10.18.1 14.05.2026 SB2026051401
SB2026051497
SB2026051498
and 27 more
#VU131375 - Uncontrolled Memory Allocation
CVE-2026-42946
CWE-789 Medium
No
No
1.21.5-150400.3.20.1, 1.21.5-150600.10.18.1 14.05.2026 SB2026051401
SB2026051497
SB2026051498
and 14 more
#VU131374 - Out-of-bounds read
CVE-2026-42934
CWE-125 Medium
No
No
1.21.5-150400.3.20.1, 1.21.5-150600.10.18.1 14.05.2026 SB2026051401
SB2026051497
SB2026051498
and 12 more
#VU124482 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-28753
CWE-93 Medium
No
No
1.21.5-150400.3.15.1, 1.21.5-150600.10.15.1 25.03.2026 SB2026032585
SB20260325200
SB2026041117
and 4 more
#VU124480 - Integer overflow
CVE-2026-27784
CWE-190 High
No
No
1.21.5-150400.3.15.1, 1.21.5-150600.10.15.1 25.03.2026 SB2026032585
SB20260325200
SB2026040801
and 17 more
#VU124478 - Heap-based Buffer Overflow
CVE-2026-27654
CWE-122 Medium
Available
No
1.21.5-150400.3.15.1, 1.21.5-150600.10.15.1 25.03.2026 SB2026032585
SB20260325200
SB2026033174
and 17 more
#VU124475 - Out-of-bounds write
CVE-2026-32647
CWE-787 High
No
No
1.21.5-150400.3.20.1, 1.21.5-150600.10.18.1 25.03.2026 SB2026032585
SB20260325200
SB2026040801
and 17 more
#VU124473 - NULL Pointer Dereference
CVE-2026-27651
CWE-476 Medium
No
No
1.21.5-150400.3.20.1, 1.21.5-150600.10.18.1 25.03.2026 SB2026032585
SB20260325200
SB2026040801
and 17 more
#VU122335 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2026-1642
CWE-349 Medium
No
No
1.21.5-150400.3.15.1, 1.21.5-150600.10.15.1 05.02.2026 SB2026020501
SB2026020505
SB2026020511
and 22 more
#VU114082 - Out-of-bounds read
CVE-2025-53859
CWE-125 Low
No
No
1.19.8-150300.3.18.1, 1.21.5-150400.3.12.1, 1.21.5-150600.10.12.1 14.08.2025 SB2025081427
SB2025082564
SB2025082961
and 12 more
#VU103686 - Improper Authentication
CVE-2025-23419
CWE-287 Low
No
No
1.19.8-150300.3.18.1, 1.21.5-150400.3.12.1, 1.21.5-150600.10.12.1 06.02.2025 SB2025020653
SB2025020670
SB2025020671
and 17 more
#VU96020 - Out-of-bounds read
CVE-2024-7347
CWE-125 Medium
No
No
1.21.5-150400.3.6.1, 1.21.5-150600.10.3.1 14.08.2024 SB2024081481
SB2024081706
SB2024081707
and 25 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
1.21.5-150400.3.6.1, 1.21.5-150600.10.3.1 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 652 more
#VU68495 - Out-of-bounds read
CVE-2022-41742
CWE-125 Medium
No
No
1.16.1-150100.6.19.1, 1.16.1-150200.3.12.1, 1.19.8-150300.3.12.1, 1.21.5-150400.3.3.1 19.10.2022 SB2022101941
SB2022111503
SB2022111601
and 34 more
#VU68494 - Out-of-bounds read
CVE-2022-41741
CWE-125 Medium
No
No
1.16.1-150100.6.19.1, 1.16.1-150200.3.12.1, 1.19.8-150300.3.12.1, 1.21.5-150400.3.3.1 19.10.2022 SB2022101941
SB2022111503
SB2022111601
and 32 more


Showing elements 1 - 20 out of 22