- Security fix for CVE-2014-3616

    - Create nginx-filesystem subpackage

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201502-06 (nginx: Information disclosure)

    An SSL session fixation vulnerability has been found in nginx when       multiple servers use the same shared ssl_session_cache or       ssl_session_ticket_key.
  Impact :

    A remote attacker may be able to obtain sensitive information.
  Workaround :

    There is no known workaround at this time.

Updated nginx package fixes security vulnerabilities :

A bug in the experimental SPDY implementation in nginx was found, which might allow an attacker to cause a heap memory buffer overflow in a worker process by using a specially crafted request, potentially resulting in arbitrary code execution (CVE-2014-0133).

Antoine Delignat-Lavaud and Karthikeyan Bhargavan discovered that it was possible to reuse cached SSL sessions in unrelated contexts, allowing virtual host confusion attacks in some configurations by an attacker in a privileged network position (CVE-2014-3616).

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0465 advisory.

    This advisory aggregates security fixes for the nginx SRPM in CIQ LTS 9.2. It addresses 18 CVEs:
    CVE-2016-0742, CVE-2018-16845, CVE-2021-3618, CVE-2013-2028, CVE-2018-16843, and 13 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Antoine Delignat-Lavaud and Karthikeyan Bhargavan discovered that it was possible to reuse cached SSL sessions in unrelated contexts, allowing virtual host confusion attacks in some configurations by an attacker in a privileged network position.

A virtual host confusion issue was found in nginx, allowing HTTPS connections for one origin to be redirected to the virtual host of a different origin. This leads to a variety of issues, such as cookie theft and session hijacking. It could be triggered from a cross-site scripting flaw, tricking a user into visiting a malicious URL, and so on.

The version of nginx installed on the remote host is 0.5.6 or higher, 1.6.x prior to 1.6.2, or 1.7.x prior to 1.7.5. It is, therefore, affected by an SSL session or TLS session ticket key handling error. A flaw exists in the file 'event/ngx_event_openssl.c' that could allow a remote attacker to obtain sensitive information or to take control of a session.

Note that this issue only affects servers having multiple 'server{}' configurations sharing the same values for 'ssl_session_cache' or 'ssl_session_ticket_key'.

The nginx project reports :

Security: it was possible to reuse SSL sessions in unrelated contexts if a shared SSL session cache or the same TLS session ticket key was used for multiple 'server' blocks (CVE-2014-3616).

ID	名稱	產品	系列	已發布	已更新	嚴重性
77975	Fedora 21 : nginx-1.6.2-2.fc21 (2014-11251)	Nessus	Fedora Local Security Checks	2014/9/30	2021/1/11	medium
81229	GLSA-201502-06 : nginx: Information disclosure	Nessus	Gentoo Local Security Checks	2015/2/9	2021/1/11	medium
82347	Mandriva Linux Security Advisory : nginx (MDVSA-2015:094)	Nessus	Mandriva Local Security Checks	2015/3/30	2021/1/14	medium
354474	Rocky Linux 9.2 [CIQ] Security Update: nginx / nginx-all-modules / nginx-core / nginx-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0465)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	medium
77762	Debian DSA-3029-1 : nginx - security update	Nessus	Debian Local Security Checks	2014/9/22	2021/1/11	medium
78364	Amazon Linux AMI : nginx (ALAS-2014-421)	Nessus	Amazon Linux Local Security Checks	2014/10/12	2018/4/18	medium
78386	nginx < 1.6.2 / 1.7.5 SSL Session Reuse	Nessus	Web Servers	2014/10/13	2026/7/17	medium
77717	FreeBSD : nginx -- inject commands into SSL session vulnerability (77b784bb-3dc6-11e4-b191-f0def16c5c1b)	Nessus	FreeBSD Local Security Checks	2014/9/17	2021/1/6	medium
78242	Fedora 19 : nginx-1.4.7-3.fc19 (2014-11370)	Nessus	Fedora Local Security Checks	2014/10/11	2021/1/11	medium
78243	Fedora 20 : nginx-1.4.7-3.fc20 (2014-11415)	Nessus	Fedora Local Security Checks	2014/10/11	2021/1/11	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium