CVE-2024-7347: f5 nginx open source Buffer Over-read

CVSS: 5.7v4.0MediumModified

AliasesALPINE-CVE-2024-7347MGASA-2024-0286RHSA-2025:3261+10 more

Published 14-08-2024Last modified 03-11-2025

Vulnerability summary

CVE-2024-7347 is a medium (CVSS 5.7) Buffer Over-read vulnerability in f5 nginx open source. EPSS estimates a 0.32% chance of exploitation in the next 30 days, higher than 23.4% of scored vulnerabilities.

Overall risk

23/100

0100

Low · default modelHow is this calculated?

CVSS score

5.7/10

010

Medium · v4.0 (CVE.org)

EPSS score

0.32%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 6 · Related 2

DLA-4091-1 RHSA-2025:7402 RHSA-2025:7546 RHSA-2025:7619 SUSE-SU-2025:0282-1 SUSE-SU-2025:0283-1

Timeline

14-08-2024
PublishedVulnerability first disclosed.
03-11-2025
Last modifiedVulnerability information updated.

Description

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngx_http_mp4_module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted mp4 file with the ngx_http_mp4_module. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CVSS metrics

9 scores · 6 sources · 2 versions

v4.05.7v3.14.7

EPSS trend

Probability

0.32%

Chance of exploitation in the next 30 days

Percentile

23%

Versus all other CVEs

30-day change

0.00 pp

From 0.32% on 18-09-2026

18-09-202618-10-2026

EPSS score

0.32%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Redhat18 products

nginx< 1:1.22.1-8.module+el9.5.0+22953+b175c265.1 | < 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1 | < 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2 | < 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1 | < 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-all-modules< 1:1.22.1-8.module+el9.5.0+22953+b175c265.1 | < 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1 | < 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2 | < 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1 | < 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-core< 1:1.22.1-8.module+el9.5.0+22953+b175c265.1 | < 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1 | < 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2 | < 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1 | < 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-core-debuginfo< 1:1.22.1-8.module+el9.5.0+22953+b175c265.1 | < 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1 | < 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2 | < 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1 | < 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-debuginfo< 1:1.22.1-8.module+el9.5.0+22953+b175c265.1 | < 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1 | < 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2 | < 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1 | < 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2

nginx-debugsource< 1:1.22.1-8.module+el9.5.0+22953+b175c265.1 | < 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1 | < 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2 | < 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1 | < 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-filesystem< 1:1.22.1-8.module+el9.5.0+22953+b175c265.1 | < 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1 | < 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2 | < 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1 | < 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-mod-devel< 1:1.22.1-8.module+el9.5.0+22953+b175c265.1 | < 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1 | < 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2 | < 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1 | < 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-mod-http-image-filter< 1:1.22.1-8.module+el9.5.0+22953+b175c265.1 | < 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1 | < 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2 | < 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1 | < 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-mod-http-image-filter-debuginfo< 1:1.22.1-8.module+el9.5.0+22953+b175c265.1 | < 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1 | < 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2 | < 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1 | < 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-mod-http-perl< 1:1.22.1-8.module+el9.5.0+22953+b175c265.1 | < 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1 | < 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2 | < 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1 | < 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-mod-http-perl-debuginfo< 1:1.22.1-8.module+el9.5.0+22953+b175c265.1 | < 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1 | < 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2 | < 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1 | < 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-mod-http-xslt-filter< 1:1.22.1-8.module+el9.5.0+22953+b175c265.1 | < 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1 | < 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2 | < 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1 | < 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-mod-http-xslt-filter-debuginfo< 1:1.22.1-8.module+el9.5.0+22953+b175c265.1 | < 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1 | < 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2 | < 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1 | < 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-mod-mail< 1:1.22.1-8.module+el9.5.0+22953+b175c265.1 | < 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1 | < 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2 | < 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1 | < 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-mod-mail-debuginfo< 1:1.22.1-8.module+el9.5.0+22953+b175c265.1 | < 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1 | < 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2 | < 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1 | < 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-mod-stream< 1:1.22.1-8.module+el9.5.0+22953+b175c265.1 | < 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1 | < 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2 | < 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1 | < 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2
nginx-mod-stream-debuginfo< 1:1.22.1-8.module+el9.5.0+22953+b175c265.1 | < 1:1.24.0-4.module+el9.5.0+22954+e2d70a1c.1 | < 1:1.24.0-1.module+el9.4.0+23026+aaa2e3cb.2 | < 1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1 | < 1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2

Show all 18

F52 products

nginx open source≥ 1.5.13 (No fix recorded) | ≥ 1.5.13, < 1.26.2 | 1.27.0
nginx plus≥ R4 (No fix recorded) | ≥ r27, < r31 | r31 | r31:p1 | r32

Alpine1 product

nginx< 1.26.2-r0

Debian1 product

nginx< 1.22.1-9+deb12u2 | < 1.26.0-2

Mageia1 product

nginx< 1.26.2-1.mga9

Opensuse1 product

nginx&distro=openSUSE Tumbleweed< 1.27.1-1.1

Ubuntu1 product

nginx< 1.18.0-0ubuntu1.6 | < 1.18.0-6ubuntu14.5 | < 1.24.0-2ubuntu7.1 | < 1.10.3-0ubuntu0.16.04.5+esm6 | < 1.14.0-0ubuntu1.11+esm1 | < 1.4.6-1ubuntu3.9+esm5

7 vendors · 25 products

References

29 links

my.f5.com/manage/s/article/K000140529Vendor AdvisoryARTICLEREPORT
www.openwall.com/lists/oss-security/2024/08/14/4Mailing List
lists.debian.org/debian-lts-announce/2025/03/msg00017.html
security.alpinelinux.org/vuln/CVE-2024-7347Advisory
advisories.mageia.org/MGASA-2024-0286.htmlAdvisory
bugs.mageia.org/show_bug.cgi?id=33509REPORT
openwall.com/lists/oss-security/2024/08/14/4WEB
www.cve.org/CVERecord?id=CVE-2024-7347AdvisoryREPORT
access.redhat.com/errata/RHSA-2025:3261Advisory
access.redhat.com/security/updates/classification/ARTICLE

Show all 29 references

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities