The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0283-1 advisory.

    - CVE-2023-44487: Mitigate HTTP/2 Rapid Reset Attack (bsc#1216171)
    - CVE-2024-7347: Fixed worker crashes on special crafted mp4 files containing invalid chunk information     (bsc#1229155)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1476 advisory.

    This advisory aggregates security fixes for the nginx SRPM in CIQ LTS 9.6. It addresses 5 CVEs:
    CVE-2022-41741, CVE-2022-41742, CVE-2024-7347, CVE-2025-23419, CVE-2026-42055.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7014-3 advisory.

    USN-7014-1 fixed a vulnerability in nginx. This update provides the corresponding update for Ubuntu 14.04     LTS.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7014-2 advisory.

    USN-7014-1 fixed a vulnerability in nginx. This update provides the corresponding updates for Ubuntu 16.04     LTS and Ubuntu 18.04 LTS.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:7549 advisory.

    nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency,     performance, and low memory usage.

    Security Fix(es):

    * nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9815:01 advisory.

    * nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:7546 advisory.

    nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency,     performance, and low memory usage.

    Security Fix(es):

    * nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741)

    * nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742)

    * nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4091 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4091-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                       Andrej Shadura     March 25, 2025                                https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : nginx     Version        : 1.18.0-6.1+deb11u4     CVE ID         : CVE-2024-7347 CVE-2025-23419

    This upload fixes two security issues in the version of nginx shipped     in bullseye.

    CVE-2024-7347

        Nginx has a vulnerability in the ngx_http_mp4_module, which might         allow an attacker to over-read nginx worker memory resulting in         its termination using a specially crafted mp4 file. The issue only         affects nginx if it is built with the ngx_http_mp4_module and the         mp4 directive is used in the configuration file. Additionally, the         attack is possible only if an attacker can trigger the processing         of a specially crafted mp4 file with the ngx_http_mp4_module.

    CVE-2025-23419

        When multiple server blocks are configured to share the same         IP address and port, an attacker can use session resumption         to bypass client certificate authentication requirements on         these servers. This vulnerability arises when TLS Session Tickets         are used and/or the SSL session cache         are used in the default server and the default server is performing         client certificate authentication.
        This issue did not affect ngx_stream_ssl_module in bullseye since         the stream virtual servers funcionality was added in a later         release.

    For Debian 11 bullseye, these problems have been fixed in version     1.18.0-6.1+deb11u4.

    We recommend that you upgrade your nginx packages.

    For the detailed security status of nginx please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/nginx

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the nginx package has been released.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1563 advisory.

    This advisory aggregates security fixes for the nginx SRPM in CIQ LTS 9.2. It addresses 4 CVEs:
    CVE-2025-23419, CVE-2026-60005, CVE-2024-7347, CVE-2026-42055.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
214783	SUSE SLES15 / openSUSE 15 Security Update : nginx (SUSE-SU-2025:0283-1)	Nessus	SuSE Local Security Checks	2025/1/29	2025/1/30	critical
354119	Rocky Linux 9.6 [CIQ] Security Update: nginx / nginx-all-modules / nginx-core / nginx-core-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_1476)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/13	critical
208960	Ubuntu 14.04 LTS : nginx vulnerability (USN-7014-3)	Nessus	Ubuntu Local Security Checks	2024/10/14	2025/9/8	medium
208280	Ubuntu 16.04 LTS / 18.04 LTS : nginx vulnerability (USN-7014-2)	Nessus	Ubuntu Local Security Checks	2024/10/8	2025/9/8	medium
237142	RHEL 9 : nginx:1.22 (RHSA-2025:7549)	Nessus	Red Hat Local Security Checks	2025/5/22	2025/6/5	medium
283121	MiracleLinux 9 : nginx:1.22 (AXSA:2025-9815:01)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/1/20	medium
235919	RHEL 9 : nginx (RHSA-2025:7546)	Nessus	Red Hat Local Security Checks	2025/5/14	2025/6/5	medium
233322	Debian dla-4091 : libnginx-mod-http-auth-pam - security update	Nessus	Debian Local Security Checks	2025/3/25	2025/3/25	medium
334106	Photon OS 5.0: Nginx PHSA-2024-5.0-91-0350	Nessus	PhotonOS Local Security Checks	2026/8/10	2026/11/2	medium
355396	Rocky Linux 9.2 [CIQ] Security Update: nginx / nginx-all-modules / nginx-core / nginx-filesystem / etc Multiple Vulnerabilities (ciqsa-2026_1563)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	critical

検出

プラグインの検索

critical

critical

medium

medium

medium

medium

medium

medium

medium

critical