CVE-2018-16845 Denial of service in nginx
Attackers can cause worker crashes, infinite loops, or memory disclosure via crafted MP4 files in nginx when the optional MP4 module is enabled.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-16845?
CVE-2018-16845 is a high-severity denial of service vulnerability in Apple Xcode, published on 7 Nov 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an attacker to cause infinite loop in a worker process, cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted mp4 file. The issue only affects nginx if it is built with the ngx_http_mp4_module (the module is not built by default) and the .mp4. directive is used in the configuration file. Further, the attack is only possible if an attacker is able to trigger processing of a specially crafted mp4 file with the ngx_http_mp4_module.
Which versions are affected by CVE-2018-16845?
It affects 5 products.
Linux distribution packages (4)
rh-nginx18-nginx Red Hat:rhel_software_collections:3::el6 | All versions | 1:1.8.1-1.el6.1 |
rh-nginx18-nginx-debuginfo Red Hat:rhel_software_collections:3::el6 | All versions | 1:1.8.1-1.el6.1 |
rh-nginx18-nginx Red Hat:rhel_software_collections:3::el7 | All versions | 1:1.8.1-1.el7.1 |
rh-nginx18-nginx-debuginfo Red Hat:rhel_software_collections:3::el7 | All versions | 1:1.8.1-1.el7.1 |
Products include Apple Xcode, Canonical Ubuntu Linux, Debian Debian Linux, F5 Nginx, Opensuse Leap.
How do I fix CVE-2018-16845?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2018-16845 being exploited?
There is no known exploitation of CVE-2018-16845 in the wild and no public exploit code.
Other vulnerabilities in Apple Xcode
Sources
Also known as ALPINE-CVE-2018-16845, CLEANSTART-2026-DQ45317, DEBIAN-CVE-2018-16845, DLA-1572-1, GHSA-vq5f-vpgw-9vcp, RHSA-2018:3652 and 1 more.