CVE-2026-65982:詳細資料

CVE-2026-65982

2026-11-11
21h16 +00:00
Memory Corruption
2026-11-11
21h16 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

nginx-http-flv-module is a media streaming server based on nginx-rtmp-module. Prior to version 1.2.14, if a server received an HTTP/1.0 request without a header Host, which was permitted by HTTP core of Nginx, then r->headers_in.host was NULL, nginx-http-flv-module used r->headers_in.host->value to make a pseudo tcUrl, so NULL-pointer dereference happened. This issue has been patched in version 1.2.14.

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-476 NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.

參考資料