REDHAT-BUG-2141496: Medium severity Nginx NGINX Open Source vulnerability
NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngxhttpmp4module that might allow a local attacker to cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted audio or video file. The issue affects only NGINX products that are built with the module ngxhttpmp4module, when the mp4 directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngxhttpmp4module.
https://nginx.org/en/securityadvisories.html
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
nginx/nginxto a version that resolves this vulnerability.Fixed in 1.23.2 - Upgrade
Upgrade
nginx/nginxto a version that resolves this vulnerability.Fixed in 1.22.1 - Upgrade
Upgrade
nginx/open-source-subscriptionto a version that resolves this vulnerability.Fixed in R2 P1 - Upgrade
Upgrade
nginx/open-source-subscriptionto a version that resolves this vulnerability.Fixed in R1 P1 - Upgrade
Upgrade
nginx/plusto a version that resolves this vulnerability.Fixed in R27 P1 - Upgrade
Upgrade
nginx/plusto a version that resolves this vulnerability.Fixed in R26 P1 - Configuration
Avoid triggering mp4 directive processing by removing/omitting use of the mp4 directive in the NGINX configuration for builds that include ngx_http_mp4_module (since the vulnerability is possible only when ngx_http_mp4_module processes a specially crafted audio/video file via the mp4 directive).
nginx ngx_http_mp4_module mp4 directive usage = not specified - Compensating control
Ensure attackers cannot trigger processing of specially crafted audio/video files through ngx_http_mp4_module (e.g., restrict upload/paths/requests that would cause the mp4 directive to be processed).
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2141496?
REDHAT-BUG-2141496 has a high severity due to potential denial of service from a local attacker.
How do I fix REDHAT-BUG-2141496?
To fix REDHAT-BUG-2141496, upgrade to NGINX Open Source version 1.23.2 or 1.22.1, or the respective versions of NGINX Plus and NGINX Open Source Subscription.
What versions are affected by REDHAT-BUG-2141496?
Versions of NGINX Open Source prior to 1.23.2 and 1.22.1, as well as NGINX Plus before R27 P1 and R26 P1, are affected.
Can REDHAT-BUG-2141496 be exploited remotely?
REDHAT-BUG-2141496 requires local access to exploit, meaning it cannot be triggered remotely.
What component of NGINX does REDHAT-BUG-2141496 affect?
REDHAT-BUG-2141496 affects the ngx_http_mp4_module within NGINX.