It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-099 advisory.

  - ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing     different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A     MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one     subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-     protocol attacks may be possible where the behavior of one protocol service may compromise the other at     the application layer. (CVE-2021-3618)

  - NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1     and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module     ngx_http_mp4_module that might allow a local attacker to corrupt NGINX worker memory, resulting in its     termination or potential other impact using a specially crafted audio or video file. The issue affects     only NGINX products that are built with the ngx_http_mp4_module, when the mp4 directive is used in the     configuration file. Further, the attack is possible only if an attacker can trigger processing of a     specially crafted audio or video file with the module ngx_http_mp4_module. (CVE-2022-41741)

  - NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1     and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module     ngx_http_mp4_module that might allow a local attacker to cause a worker process crash, or might result in     worker process memory disclosure by using a specially crafted audio or video file. The issue affects only     NGINX products that are built with the module ngx_http_mp4_module, when the mp4 directive is used in the     configuration file. Further, the attack is possible only if an attacker can trigger processing of a     specially crafted audio or video file with the module ngx_http_mp4_module. (CVE-2022-41742)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2023 : nginx, nginx-all-modules, nginx-core (ALAS2023-2023-099)

high Nessus Plugin ID 173141

Version 1.1

Version 1.0

Version 1.1 Nov 2, 2023, 2:21 PM IAVM reference Plugin Feed: 202311021421
Version 1.0 Mar 22, 2023, 12:14 AM New Plugin Feed: 202303220014