Headline
Ubuntu Security Notice USN-7014-3
Ubuntu Security Notice 7014-3 - USN-7014-1 fixed a vulnerability in nginx. This update provides the corresponding update for Ubuntu 14.04 LTS. It was discovered that the nginx ngx_http_mp4 module incorrectly handled certain malformed mp4 files. In environments where the mp4 directive is in use, a remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of service.
==========================================================================Ubuntu Security Notice USN-7014-3October 14, 2024nginx vulnerability==========================================================================A security issue affects these releases of Ubuntu and its derivatives:- Ubuntu 14.04 LTSSummary:nginx could be made to crash if it received specially crafted networktraffic.Software Description:- nginx: small, powerful, scalable web/proxy serverDetails:USN-7014-1 fixed a vulnerability in nginx. This updateprovides the corresponding update for Ubuntu 14.04 LTS.Original advisory details: It was discovered that the nginx ngx_http_mp4 module incorrectly handled certain malformed mp4 files. In environments where the mp4 directive is in use, a remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of service.Update instructions:The problem can be corrected by updating your system to the followingpackage versions:Ubuntu 14.04 LTS nginx 1.4.6-1ubuntu3.9+esm5 Available with Ubuntu Pro nginx-common 1.4.6-1ubuntu3.9+esm5 Available with Ubuntu Pro nginx-core 1.4.6-1ubuntu3.9+esm5 Available with Ubuntu Pro nginx-extras 1.4.6-1ubuntu3.9+esm5 Available with Ubuntu Pro nginx-full 1.4.6-1ubuntu3.9+esm5 Available with Ubuntu Pro nginx-light 1.4.6-1ubuntu3.9+esm5 Available with Ubuntu ProIn general, a standard system update will make all the necessary changes.References: https://ubuntu.com/security/notices/USN-7014-3 https://ubuntu.com/security/notices/USN-7014-2 https://ubuntu.com/security/notices/USN-7014-1 CVE-2024-7347Related news
Ubuntu Security Notice 7014-2 - USN-7014-1 fixed a vulnerability in nginx. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. It was discovered that the nginx ngx_http_mp4 module incorrectly handled certain malformed mp4 files. In environments where the mp4 directive is in use, a remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of service.
Gentoo Linux Security Advisory 202409-32 - Multiple vulnerabilities have been discovered in nginx, the worst of which could result in denial of service. Versions greater than or equal to 1.26.2-r2 are affected.
Ubuntu Security Notice 7014-1 - It was discovered that the nginx ngx_http_mp4 module incorrectly handled certain malformed mp4 files. In environments where the mp4 directive is in use, a remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of service.