When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngxhttpsslmodule.html#sslsessionticketkey are used and/or the SSL session cache https://nginx.org/en/docs/http/ngxhttpsslmodule.html#sslsession_cache are used in the default server and the default server is performing client certificate authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-auth-pam" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-auth-pam-dbgsym" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-cache-purge" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-cache-purge-dbgsym" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-dav-ext" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-dav-ext-dbgsym" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-echo" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-echo-dbgsym" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-fancyindex" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-fancyindex-dbgsym" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-geoip" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-geoip-dbgsym" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-geoip2" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-geoip2-dbgsym" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-headers-more-filter" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-headers-more-filter-dbgsym" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-image-filter" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-image-filter-dbgsym" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-lua" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-lua-dbgsym" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-ndk" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-ndk-dbgsym" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-perl" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-perl-dbgsym" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-subs-filter" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-subs-filter-dbgsym" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-uploadprogress" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-uploadprogress-dbgsym" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-upstream-fair" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-upstream-fair-dbgsym" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-xslt-filter" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-http-xslt-filter-dbgsym" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-mail" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-mail-dbgsym" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-nchan" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-nchan-dbgsym" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-rtmp" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-rtmp-dbgsym" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-stream" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "libnginx-mod-stream-dbgsym" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "nginx" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "nginx-common" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "nginx-core" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "nginx-core-dbgsym" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "nginx-doc" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "nginx-extras" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "nginx-extras-dbgsym" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "nginx-full" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "nginx-full-dbgsym" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "nginx-light" }, { "binary_version": "1.18.0-0ubuntu1.7", "binary_name": "nginx-light-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-auth-pam" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-auth-pam-dbgsym" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-cache-purge" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-cache-purge-dbgsym" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-dav-ext" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-dav-ext-dbgsym" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-echo" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-echo-dbgsym" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-fancyindex" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-fancyindex-dbgsym" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-geoip" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-geoip-dbgsym" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-geoip2" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-geoip2-dbgsym" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-headers-more-filter" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-headers-more-filter-dbgsym" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-image-filter" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-image-filter-dbgsym" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-ndk" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-ndk-dbgsym" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-perl" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-perl-dbgsym" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-subs-filter" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-subs-filter-dbgsym" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-uploadprogress" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-uploadprogress-dbgsym" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-upstream-fair" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-upstream-fair-dbgsym" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-xslt-filter" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-http-xslt-filter-dbgsym" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-mail" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-mail-dbgsym" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-nchan" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-nchan-dbgsym" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-rtmp" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-rtmp-dbgsym" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-stream" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-stream-dbgsym" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-stream-geoip" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-stream-geoip-dbgsym" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-stream-geoip2" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "libnginx-mod-stream-geoip2-dbgsym" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "nginx" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "nginx-common" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "nginx-core" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "nginx-core-dbgsym" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "nginx-doc" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "nginx-extras" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "nginx-extras-dbgsym" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "nginx-full" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "nginx-light" }, { "binary_version": "1.18.0-6ubuntu14.6", "binary_name": "nginx-light-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.26.0-2ubuntu3.2", "binary_name": "libnginx-mod-http-geoip" }, { "binary_version": "1.26.0-2ubuntu3.2", "binary_name": "libnginx-mod-http-geoip-dbgsym" }, { "binary_version": "1.26.0-2ubuntu3.2", "binary_name": "libnginx-mod-http-image-filter" }, { "binary_version": "1.26.0-2ubuntu3.2", "binary_name": "libnginx-mod-http-image-filter-dbgsym" }, { "binary_version": "1.26.0-2ubuntu3.2", "binary_name": "libnginx-mod-http-perl" }, { "binary_version": "1.26.0-2ubuntu3.2", "binary_name": "libnginx-mod-http-perl-dbgsym" }, { "binary_version": "1.26.0-2ubuntu3.2", "binary_name": "libnginx-mod-http-xslt-filter" }, { "binary_version": "1.26.0-2ubuntu3.2", "binary_name": "libnginx-mod-http-xslt-filter-dbgsym" }, { "binary_version": "1.26.0-2ubuntu3.2", "binary_name": "libnginx-mod-mail" }, { "binary_version": "1.26.0-2ubuntu3.2", "binary_name": "libnginx-mod-mail-dbgsym" }, { "binary_version": "1.26.0-2ubuntu3.2", "binary_name": "libnginx-mod-stream" }, { "binary_version": "1.26.0-2ubuntu3.2", "binary_name": "libnginx-mod-stream-dbgsym" }, { "binary_version": "1.26.0-2ubuntu3.2", "binary_name": "libnginx-mod-stream-geoip" }, { "binary_version": "1.26.0-2ubuntu3.2", "binary_name": "libnginx-mod-stream-geoip-dbgsym" }, { "binary_version": "1.26.0-2ubuntu3.2", "binary_name": "nginx" }, { "binary_version": "1.26.0-2ubuntu3.2", "binary_name": "nginx-common" }, { "binary_version": "1.26.0-2ubuntu3.2", "binary_name": "nginx-core" }, { "binary_version": "1.26.0-2ubuntu3.2", "binary_name": "nginx-dbgsym" }, { "binary_version": "1.26.0-2ubuntu3.2", "binary_name": "nginx-dev" }, { "binary_version": "1.26.0-2ubuntu3.2", "binary_name": "nginx-doc" }, { "binary_version": "1.26.0-2ubuntu3.2", "binary_name": "nginx-extras" }, { "binary_version": "1.26.0-2ubuntu3.2", "binary_name": "nginx-full" }, { "binary_version": "1.26.0-2ubuntu3.2", "binary_name": "nginx-light" } ] }