CVE-2018-16845

CVSS V2 Medium 5.8 CVSS V3 Medium 6.1
Description
nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an attacker to cause infinite loop in a worker process, cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted mp4 file. The issue only affects nginx if it is built with the ngx_http_mp4_module (the module is not built by default) and the .mp4. directive is used in the configuration file. Further, the attack is only possible if an attacker is able to trigger processing of a specially crafted mp4 file with the ngx_http_mp4_module.
Overview
  • CVE ID
  • CVE-2018-16845
  • Assigner
  • secalert@redhat.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2018-11-07T14:29:00
  • Last Modified Date
  • 2022-02-22T19:27:12
Weakness Enumerations
CWE URL
CWE-400 http://cwe.mitre.org/data/definitions/400.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:* 1 OR 1.0.7 1.0.15
cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:* 1 OR 1.1.3 1.15.5
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* 1 OR
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* 1 OR
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* 1 OR
cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:* 1 OR 13.0
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:M/Au:N/C:P/I:N/A:P
  • Access Vector
  • NETWORK
  • Access Compatibility
  • MEDIUM
  • Authentication
  • NONE
  • Confidentiality Impact
  • PARTIAL
  • Integrity Impact
  • NONE
  • Availability Impact
  • PARTIAL
  • Base Score
  • 5.8
  • Severity
  • MEDIUM
  • Exploitability Score
  • 8.6
  • Impact Score
  • 4.9
CVSS Version 3
  • Version
  • 3.1
  • Vector String
  • CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
  • Attack Vector
  • LOCAL
  • Attack Compatibility
  • LOW
  • Privileges Required
  • NONE
  • User Interaction
  • REQUIRED
  • Scope
  • UNCHANGED
  • Confidentiality Impact
  • LOW
  • Availability Impact
  • HIGH
  • Base Score
  • 6.1
  • Base Severity
  • MEDIUM
  • Exploitability Score
  • 1.8
  • Impact Score
  • 4.2
References
Reference URL Reference Tags
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16845 Issue Tracking Third Party Advisory
http://mailman.nginx.org/pipermail/nginx-announce/2018/000221.html Mailing List Patch Vendor Advisory
https://usn.ubuntu.com/3812-1/ Patch Third Party Advisory
http://www.securitytracker.com/id/1042039 Third Party Advisory VDB Entry
https://www.debian.org/security/2018/dsa-4335 Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/11/msg00010.html Mailing List Third Party Advisory
http://www.securityfocus.com/bid/105868 Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2018:3653 Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3652 Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3681 Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3680 Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00035.html Mailing List Third Party Advisory
https://support.apple.com/kb/HT212818 Third Party Advisory
http://seclists.org/fulldisclosure/2021/Sep/36 Mailing List Third Party Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2018-16845
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16845
History
Created Old Value New Value Data Type Notes
2022-05-10 06:31:53 Added to TrackCVE
2022-12-03 14:09:03 2018-11-07T14:29Z 2018-11-07T14:29:00 CVE Published Date updated
2022-12-03 14:09:03 2022-02-22T19:27:12 CVE Modified Date updated
2022-12-03 14:09:03 Analyzed Vulnerability Status updated