[UPDATE] [mittel] NGINX und NGINX Plus: Mehrere Schwachstellen ermöglichen Denial of Service

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-09-16 10:51 UTC
  • Importiert: 2026-09-17 10:33 UTC
  • CVSS: 8.7
  • Quelle-ID: cert_bund
  • uid_hash: efb652db9f2dd17ae44304e48122c24dce6d0257d2b0b3122e7a8e979434eec6

Inhalt

Ein entfernter, anonymer oder ein lokaler Angreifer kann mehrere Schwachstellen in NGINX NGINX Plus und NGINX ausnutzen, um einen Denial of Service Angriff durchzuführen.

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2024-39792

HIGH

8.7

HIGH

8.7

2024-08-14

CVE-2024-7347

HIGH

8.7

MEDIUM

5.7

2024-08-14

Externe Referenzen

Bezeichnung Typ CVE Quelle

Oracle Linux Security Advisory ELSA-2026-5599 vom 2026-03-26

EXTERNAL - wid_csaf

Red Hat Security Advisory RHSA-2025:3261 vom 2025-03-26

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:3262 vom 2025-03-26

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:7402 vom 2025-05-13

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:7542 vom 2025-05-14

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:7546 vom 2025-05-14

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:7548 vom 2025-05-14

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:7549 vom 2025-05-14

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:7619 vom 2025-05-14

VENDOR - wid_csaf

Amazon Linux Security Advisory ALASNGINX1-2024-007 vom 2024-09-04

EXTERNAL - wid_csaf

Fedora Security Advisory FEDORA-2024-6BA57FD2A3 vom 2024-08-17

EXTERNAL - wid_csaf

Fedora Security Advisory FEDORA-2024-8BA5080DFA vom 2024-08-17

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2025:3261 vom 2025-07-29

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2025:3262 vom 2025-07-29

EXTERNAL - wid_csaf

GitHub Advisory Database vom 2024-08-14

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2025-3261 vom 2025-03-28

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2025-3262 vom 2025-03-28

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2025-7402 vom 2025-05-23

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-19371 vom 2026-06-24

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-28212 vom 2026-06-30

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-3638 vom 2026-03-04

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-36618 vom 2026-07-09

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-59490 vom 2026-09-02

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-67308 vom 2026-09-16

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-6923 vom 2026-04-08

EXTERNAL - wid_csaf

Debian Security Advisory DLA-4091 vom 2025-03-25

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2025:0283-1 vom 2025-01-29

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2025:0282-1 vom 2025-01-29

EXTERNAL - wid_csaf

F5 Security Advisory vom 2024-08-14

EXTERNAL - wid_csaf

F5 Security Advisory vom 2024-08-14

EXTERNAL - wid_csaf

NGINX Patch vom 2024-08-14

EXTERNAL - wid_csaf

Gentoo Linux Security Advisory GLSA-202409-32 vom 2024-09-28

EXTERNAL - wid_csaf

Ubuntu Security Notice USN-7014-1 vom 2024-09-16

EXTERNAL - wid_csaf

Ubuntu Security Notice USN-7014-2 vom 2024-10-08

EXTERNAL - wid_csaf

Ubuntu Security Notice USN-7014-3 vom 2024-10-14

EXTERNAL - wid_csaf

Dell Security Update vom 2025-10-02

EXTERNAL - wid_csaf

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
CERT-Bund (BSI)

cert_bund

government_cert - de https://wid.cert-bund.de/content/public/securityAdvisory/rss