https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T12:48:31.265326+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2018-16843 CVE-2018-16843 2026-10-06T12:48:31.292304+00:00

Affected: [UNKNOWN] nginx

nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption. This issue affects nginx compiled with the ngx_http_v2_module (not compiled by default) if the 'http2' option of the 'listen' directive is used in a configuration file.

 https://vulnerability.circl.lu/vuln/usn-3812-1 USN-3812-1 — nginx vulnerabilities 2026-10-06T12:48:31.292445+00:00

Affected: Ubuntu:14.04:LTS: nginx, Ubuntu:16.04:LTS: nginx, Ubuntu:18.04:LTS: nginx

It was discovered that nginx incorrectly handled the HTTP/2 implementation. A remote attacker could possibly use this issue to cause excessive memory consumption, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-16843)

Gal Goldshtein discovered that nginx incorrectly handled the HTTP/2 implementation. A remote attacker could possibly use this issue to cause excessive CPU usage, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-16844)

It was discovered that nginx incorrectly handled the ngx_http_mp4_module module. A remote attacker could possibly use this issue with a specially crafted mp4 file to cause nginx to crash, stop responding, or access arbitrary memory. (CVE-2018-16845)