バージョンを確認する
nginx -v1.5 に影響するCVE
| CVE | タイトル | CVSS | 悪用 | EPSS | 公開日 |
|---|---|---|---|---|---|
| CVE-2016-0746 | Use-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9.10 allows remo... | 9.8 | 8.9% | 2016-02-16 | |
| CVE-2017-20005 | NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a... | 9.8 | 3.3% | 2021-06-07 | |
| CVE-2018-16845 | nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an atta... | 8.2 | 9.8% | 2018-11-07 | |
| CVE-2016-1247 | The nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6-1ubuntu3.6 on Ubuntu... | 7.8 | 4.9% | 2016-11-30 | |
| CVE-2021-23017 | A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP pack... | 7.7 | 53.5% | 2021-06-01 | |
| CVE-2013-4547 | nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via... | 7.5 | 68.5% | 2013-11-24 | |
| CVE-2014-0133 | Heap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.5.x before 1.5.12 all... | 7.5 | 9.5% | 2014-03-29 | |
| CVE-2014-0088 | The SPDY implementation in the ngx_http_spdy_module module in nginx 1.5.10 before 1.5.11, when running on a 32... | 7.5 | 8.9% | 2014-04-29 | |
| CVE-2016-0742 | The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of servic... | 7.5 | 82.4% | 2016-02-16 | |
| CVE-2016-4450 | os/unix/ngx_files.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to cause a denial... | 7.5 | 16.4% | 2016-06-07 | |
| CVE-2017-7529 | Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in ngin... | 7.5 | 62.6% | 2017-07-13 | |
| CVE-2021-3618 | ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing differen... | 7.4 | 2.0% | 2022-03-23 | |
| CVE-2022-41742 | NGINX ngx_http_mp4_module vulnerability CVE-2022-41742 | 7.1 | 1.2% | 2022-10-20 | |
| CVE-2022-41741 | NGINX ngx_http_mp4_module vulnerability CVE-2022-41741 | 7.0 | 0.8% | 2022-10-20 | |
| CVE-2014-3556 | The STARTTLS implementation in mail/ngx_mail_smtp_handler.c in the SMTP proxy in nginx 1.5.x and 1.6.x before... | 6.8 | 7.8% | 2014-12-30 | |
| CVE-2016-0747 | The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME resolution, which all... | 5.3 | 8.7% | 2016-02-16 | |
| CVE-2019-20372 | NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by... | 5.3 | 15.0% | 2020-01-10 | |
| CVE-2014-3616 | nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ticket_key for multiple... | 4.3 | 5.7% | 2014-12-08 |
データ：CVE List（CVE® Program）、NVD、CISA KEV、FIRST EPSS（EPSS については https://www.first.org/epss を参照）、endoflife.date。ソフトウェア一覧：awesome-selfhosted（CC BY-SA 3.0）。