Antoine Delignat-Lavaud discovered that it was possible to reuse SSL sessions in unrelated contexts if a shared SSL session cache or the same TLS session ticket key was used for multiple 'server' blocks.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1381 advisory.

    This advisory aggregates security fixes for the nginx SRPM in CIQ LTS 9.6. It addresses 18 CVEs:
    CVE-2016-0742, CVE-2018-16845, CVE-2021-3618, CVE-2013-2028, CVE-2018-16843, and 13 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2351-1 advisory.

    Antoine Delignat-Lavaud and Karthikeyan Bhargavan discovered that nginx incorrectly reused cached SSL     sessions. An attacker could possibly use this issue in certain configurations to obtain access to     information from a different virtual host.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

- Security fix for CVE-2014-3616

    - Create nginx-filesystem subpackage

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201502-06 (nginx: Information disclosure)

    An SSL session fixation vulnerability has been found in nginx when       multiple servers use the same shared ssl_session_cache or       ssl_session_ticket_key.
  Impact :

    A remote attacker may be able to obtain sensitive information.
  Workaround :

    There is no known workaround at this time.

Updated nginx package fixes security vulnerabilities :

A bug in the experimental SPDY implementation in nginx was found, which might allow an attacker to cause a heap memory buffer overflow in a worker process by using a specially crafted request, potentially resulting in arbitrary code execution (CVE-2014-0133).

Antoine Delignat-Lavaud and Karthikeyan Bhargavan discovered that it was possible to reuse cached SSL sessions in unrelated contexts, allowing virtual host confusion attacks in some configurations by an attacker in a privileged network position (CVE-2014-3616).

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0465 advisory.

    This advisory aggregates security fixes for the nginx SRPM in CIQ LTS 9.2. It addresses 18 CVEs:
    CVE-2016-0742, CVE-2018-16845, CVE-2021-3618, CVE-2013-2028, CVE-2018-16843, and 13 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

A virtual host confusion issue was found in nginx, allowing HTTPS connections for one origin to be redirected to the virtual host of a different origin. This leads to a variety of issues, such as cookie theft and session hijacking. It could be triggered from a cross-site scripting flaw, tricking a user into visiting a malicious URL, and so on.

The version of nginx installed on the remote host is 0.5.6 or higher, 1.6.x prior to 1.6.2, or 1.7.x prior to 1.7.5. It is, therefore, affected by an SSL session or TLS session ticket key handling error. A flaw exists in the file 'event/ngx_event_openssl.c' that could allow a remote attacker to obtain sensitive information or to take control of a session.

Note that this issue only affects servers having multiple 'server{}' configurations sharing the same values for 'ssl_session_cache' or 'ssl_session_ticket_key'.

Antoine Delignat-Lavaud and Karthikeyan Bhargavan discovered that it was possible to reuse cached SSL sessions in unrelated contexts, allowing virtual host confusion attacks in some configurations by an attacker in a privileged network position.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
82201	Debian DLA-55-1 : nginx security update	Nessus	Debian Local Security Checks	2015/3/26	2021/1/11	medium
354203	Rocky Linux 9.6 [CIQ] Security Update: nginx / nginx-all-modules / nginx-core / nginx-core-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_1381)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	critical
77808	Ubuntu 14.04 LTS : nginx vulnerability (USN-2351-1)	Nessus	Ubuntu Local Security Checks	2014/9/23	2024/8/27	high
77975	Fedora 21 : nginx-1.6.2-2.fc21 (2014-11251)	Nessus	Fedora Local Security Checks	2014/9/30	2021/1/11	medium
81229	GLSA-201502-06 : nginx: Information disclosure	Nessus	Gentoo Local Security Checks	2015/2/9	2021/1/11	medium
82347	Mandriva Linux Security Advisory : nginx (MDVSA-2015:094)	Nessus	Mandriva Local Security Checks	2015/3/30	2021/1/14	medium
354474	Rocky Linux 9.2 [CIQ] Security Update: nginx / nginx-all-modules / nginx-core / nginx-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0465)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	medium
78364	Amazon Linux AMI : nginx (ALAS-2014-421)	Nessus	Amazon Linux Local Security Checks	2014/10/12	2018/4/18	medium
78386	nginx < 1.6.2 / 1.7.5 SSL Session Reuse	Nessus	Web Servers	2014/10/13	2026/7/17	medium
77762	Debian DSA-3029-1 : nginx - security update	Nessus	Debian Local Security Checks	2014/9/22	2021/1/11	medium

检测

插件搜索

medium

critical

high

medium

medium

medium

medium

medium

medium

medium