# CVE-2019-9516: nginx-mod-http-perl: Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 (Post Office Protocol 3) and IMAP protocols, wi...

CVE-2019-9516 is fixed in 38 products on 1 platform, first by libnginx-mod-http-auth-pam 1.14.0-0ubuntu1.4, released August 12, 2019. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2019-9516
- Priority: High
- CVSS: 7.5 (Important)
- EPSS: 0.5746
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Aug 12, 2019

## Description

Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 (Post Office Protocol 3) and IMAP protocols, with a focus on high concurrency, performance and low memory usage.   Security Fix(es):  * HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511)  * HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)  * HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | libnginx-mod-http-auth-pam Ubuntu 18.04.6 LTS (bionic) | 1.14.0-0ubuntu1.4 | [libnginx-mod-http-auth-pam 1.14.0-0ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libnginx-mod-http-auth-pam-1.14.0-0ubuntu1.4.md) | Aug 12, 2019 |
| Linux | libnginx-mod-http-cache-purge Ubuntu 18.04.6 LTS (bionic) | 1.14.0-0ubuntu1.4 | [libnginx-mod-http-cache-purge 1.14.0-0ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libnginx-mod-http-cache-purge-1.14.0-0ubuntu1.4.md) | Aug 12, 2019 |
| Linux | libnginx-mod-http-dav-ext Ubuntu 18.04.6 LTS (bionic) | 1.14.0-0ubuntu1.4 | [libnginx-mod-http-dav-ext 1.14.0-0ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libnginx-mod-http-dav-ext-1.14.0-0ubuntu1.4.md) | Aug 12, 2019 |
| Linux | libnginx-mod-http-echo Ubuntu 18.04.6 LTS (bionic) | 1.14.0-0ubuntu1.4 | [libnginx-mod-http-echo 1.14.0-0ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libnginx-mod-http-echo-1.14.0-0ubuntu1.4.md) | Aug 12, 2019 |
| Linux | libnginx-mod-http-fancyindex Ubuntu 18.04.6 LTS (bionic) | 1.14.0-0ubuntu1.4 | [libnginx-mod-http-fancyindex 1.14.0-0ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libnginx-mod-http-fancyindex-1.14.0-0ubuntu1.4.md) | Aug 12, 2019 |
| Linux | libnginx-mod-http-geoip Ubuntu 18.04.6 LTS (bionic) | 1.14.0-0ubuntu1.4 | [libnginx-mod-http-geoip 1.14.0-0ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libnginx-mod-http-geoip-1.14.0-0ubuntu1.4.md) | Aug 12, 2019 |
| Linux | libnginx-mod-http-headers-more-filter Ubuntu 18.04.6 LTS (bionic) | 1.14.0-0ubuntu1.4 | [libnginx-mod-http-headers-more-filter 1.14.0-0ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libnginx-mod-http-headers-more-filter-1.14.0-0ubuntu1.4.md) | Aug 12, 2019 |
| Linux | libnginx-mod-http-image-filter Ubuntu 18.04.6 LTS (bionic) | 1.14.0-0ubuntu1.4 | [libnginx-mod-http-image-filter 1.14.0-0ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libnginx-mod-http-image-filter-1.14.0-0ubuntu1.4.md) | Aug 12, 2019 |
| Linux | libnginx-mod-http-lua Ubuntu 18.04.6 LTS (bionic) | 1.14.0-0ubuntu1.4 | [libnginx-mod-http-lua 1.14.0-0ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libnginx-mod-http-lua-1.14.0-0ubuntu1.4.md) | Aug 12, 2019 |
| Linux | libnginx-mod-http-ndk Ubuntu 18.04.6 LTS (bionic) | 1.14.0-0ubuntu1.4 | [libnginx-mod-http-ndk 1.14.0-0ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libnginx-mod-http-ndk-1.14.0-0ubuntu1.4.md) | Aug 12, 2019 |
| Linux | libnginx-mod-http-perl Ubuntu 18.04.6 LTS (bionic) | 1.14.0-0ubuntu1.4 | [libnginx-mod-http-perl 1.14.0-0ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libnginx-mod-http-perl-1.14.0-0ubuntu1.4.md) | Aug 12, 2019 |
| Linux | libnginx-mod-http-subs-filter Ubuntu 18.04.6 LTS (bionic) | 1.14.0-0ubuntu1.4 | [libnginx-mod-http-subs-filter 1.14.0-0ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libnginx-mod-http-subs-filter-1.14.0-0ubuntu1.4.md) | Aug 12, 2019 |
| Linux | libnginx-mod-http-uploadprogress Ubuntu 18.04.6 LTS (bionic) | 1.14.0-0ubuntu1.4 | [libnginx-mod-http-uploadprogress 1.14.0-0ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libnginx-mod-http-uploadprogress-1.14.0-0ubuntu1.4.md) | Aug 12, 2019 |
| Linux | libnginx-mod-http-upstream-fair Ubuntu 18.04.6 LTS (bionic) | 1.14.0-0ubuntu1.4 | [libnginx-mod-http-upstream-fair 1.14.0-0ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libnginx-mod-http-upstream-fair-1.14.0-0ubuntu1.4.md) | Aug 12, 2019 |
| Linux | libnginx-mod-http-xslt-filter Ubuntu 18.04.6 LTS (bionic) | 1.14.0-0ubuntu1.4 | [libnginx-mod-http-xslt-filter 1.14.0-0ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libnginx-mod-http-xslt-filter-1.14.0-0ubuntu1.4.md) | Aug 12, 2019 |
| Linux | libnginx-mod-mail Ubuntu 18.04.6 LTS (bionic) | 1.14.0-0ubuntu1.4 | [libnginx-mod-mail 1.14.0-0ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libnginx-mod-mail-1.14.0-0ubuntu1.4.md) | Aug 12, 2019 |
| Linux | libnginx-mod-nchan Ubuntu 18.04.6 LTS (bionic) | 1.14.0-0ubuntu1.4 | [libnginx-mod-nchan 1.14.0-0ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libnginx-mod-nchan-1.14.0-0ubuntu1.4.md) | Aug 12, 2019 |
| Linux | libnginx-mod-rtmp Ubuntu 18.04.6 LTS (bionic) | 1.14.0-0ubuntu1.4 | [libnginx-mod-rtmp 1.14.0-0ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libnginx-mod-rtmp-1.14.0-0ubuntu1.4.md) | Aug 12, 2019 |
| Linux | libnginx-mod-stream Ubuntu 18.04.6 LTS (bionic) | 1.14.0-0ubuntu1.4 | [libnginx-mod-stream 1.14.0-0ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libnginx-mod-stream-1.14.0-0ubuntu1.4.md) | Aug 12, 2019 |
| Linux | nginx RHEL 8 | 1:1.14.1-9.module+el8.0.0+4108+af250afe | [RHSA-2019:2799](https://patchblox.com/security/data/fix/linux/rhsa-2019-2799.md) | Sep 19, 2019 |
| Linux | nginx Ubuntu 18.04.6 LTS (bionic) | 1.14.0-0ubuntu1.4 | [nginx 1.14.0-0ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-nginx-1.14.0-0ubuntu1.4.md) | Aug 12, 2019 |
| Linux | nginx ol 8 | 1:1.14.1-9.0.1.module+el8.0.0+5347+9282027e | [ELSA-2019-2799](https://patchblox.com/security/data/fix/linux/elsa-2019-2799.md) | Sep 19, 2019 |
| Linux | nginx-all-modules RHEL 8 | 1:1.14.1-9.module+el8.0.0+4108+af250afe | [RHSA-2019:2799](https://patchblox.com/security/data/fix/linux/rhsa-2019-2799.md) | Sep 19, 2019 |
| Linux | nginx-all-modules ol 8 | 1:1.14.1-9.0.1.module+el8.0.0+5347+9282027e | [ELSA-2019-2799](https://patchblox.com/security/data/fix/linux/elsa-2019-2799.md) | Sep 19, 2019 |
| Linux | nginx-common Ubuntu 18.04.6 LTS (bionic) | 1.14.0-0ubuntu1.4 | [nginx-common 1.14.0-0ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-nginx-common-1.14.0-0ubuntu1.4.md) | Aug 12, 2019 |
| Linux | nginx-core Ubuntu 18.04.6 LTS (bionic) | 1.14.0-0ubuntu1.4 | [nginx-core 1.14.0-0ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-nginx-core-1.14.0-0ubuntu1.4.md) | Aug 12, 2019 |
| Linux | nginx-extras Ubuntu 18.04.6 LTS (bionic) | 1.14.0-0ubuntu1.4 | [nginx-extras 1.14.0-0ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-nginx-extras-1.14.0-0ubuntu1.4.md) | Aug 12, 2019 |
| Linux | nginx-filesystem RHEL 8 | 1:1.14.1-9.module+el8.0.0+4108+af250afe | [RHSA-2019:2799](https://patchblox.com/security/data/fix/linux/rhsa-2019-2799.md) | Sep 19, 2019 |
| Linux | nginx-filesystem ol 8 | 1:1.14.1-9.0.1.module+el8.0.0+5347+9282027e | [ELSA-2019-2799](https://patchblox.com/security/data/fix/linux/elsa-2019-2799.md) | Sep 19, 2019 |
| Linux | nginx-full Ubuntu 18.04.6 LTS (bionic) | 1.14.0-0ubuntu1.4 | [nginx-full 1.14.0-0ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-nginx-full-1.14.0-0ubuntu1.4.md) | Aug 12, 2019 |
| Linux | nginx-light Ubuntu 18.04.6 LTS (bionic) | 1.14.0-0ubuntu1.4 | [nginx-light 1.14.0-0ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-nginx-light-1.14.0-0ubuntu1.4.md) | Aug 12, 2019 |
| Linux | nginx-mod-http-image-filter RHEL 8 | 1:1.14.1-9.module+el8.0.0+4108+af250afe | [RHSA-2019:2799](https://patchblox.com/security/data/fix/linux/rhsa-2019-2799.md) | Sep 19, 2019 |
| Linux | nginx-mod-http-image-filter ol 8 | 1:1.14.1-9.0.1.module+el8.0.0+5347+9282027e | [ELSA-2019-2799](https://patchblox.com/security/data/fix/linux/elsa-2019-2799.md) | Sep 19, 2019 |
| Linux | nginx-mod-http-perl RHEL 8 | 1:1.14.1-9.module+el8.0.0+4108+af250afe | [RHSA-2019:2799](https://patchblox.com/security/data/fix/linux/rhsa-2019-2799.md) | Sep 19, 2019 |
| Linux | nginx-mod-http-perl ol 8 | 1:1.14.1-9.0.1.module+el8.0.0+5347+9282027e | [ELSA-2019-2799](https://patchblox.com/security/data/fix/linux/elsa-2019-2799.md) | Sep 19, 2019 |
| Linux | nginx-mod-http-xslt-filter RHEL 8 | 1:1.14.1-9.module+el8.0.0+4108+af250afe | [RHSA-2019:2799](https://patchblox.com/security/data/fix/linux/rhsa-2019-2799.md) | Sep 19, 2019 |
| Linux | nginx-mod-http-xslt-filter ol 8 | 1:1.14.1-9.0.1.module+el8.0.0+5347+9282027e | [ELSA-2019-2799](https://patchblox.com/security/data/fix/linux/elsa-2019-2799.md) | Sep 19, 2019 |
| Linux | nginx-mod-mail RHEL 8 | 1:1.14.1-9.module+el8.0.0+4108+af250afe | [RHSA-2019:2799](https://patchblox.com/security/data/fix/linux/rhsa-2019-2799.md) | Sep 19, 2019 |
| Linux | nginx-mod-mail ol 8 | 1:1.14.1-9.0.1.module+el8.0.0+5347+9282027e | [ELSA-2019-2799](https://patchblox.com/security/data/fix/linux/elsa-2019-2799.md) | Sep 19, 2019 |
| Linux | nginx-mod-stream RHEL 8 | 1:1.14.1-9.module+el8.0.0+4108+af250afe | [RHSA-2019:2799](https://patchblox.com/security/data/fix/linux/rhsa-2019-2799.md) | Sep 19, 2019 |
| Linux | nginx-mod-stream ol 8 | 1:1.14.1-9.0.1.module+el8.0.0+5347+9282027e | [ELSA-2019-2799](https://patchblox.com/security/data/fix/linux/elsa-2019-2799.md) | Sep 19, 2019 |
| Linux | nodejs RHEL 8 | 1:10.16.3-2.module+el8.0.0+4214+49953fda | [RHSA-2019:2925](https://patchblox.com/security/data/fix/linux/rhsa-2019-2925.md) | Sep 30, 2019 |
| Linux | nodejs ol 8 | 1:10.14.1-1.module+el8.0.0+5349+4d6b561f | [ELSA-2019-2925](https://patchblox.com/security/data/fix/linux/elsa-2019-2925.md) | Sep 30, 2019 |
| Linux | nodejs-devel RHEL 8 | 1:10.16.3-2.module+el8.0.0+4214+49953fda | [RHSA-2019:2925](https://patchblox.com/security/data/fix/linux/rhsa-2019-2925.md) | Sep 30, 2019 |
| Linux | nodejs-devel ol 8 | 1:10.14.1-1.module+el8.0.0+5349+4d6b561f | [ELSA-2019-2925](https://patchblox.com/security/data/fix/linux/elsa-2019-2925.md) | Sep 30, 2019 |
| Linux | nodejs-docs RHEL 8 | 1:10.16.3-2.module+el8.0.0+4214+49953fda | [RHSA-2019:2925](https://patchblox.com/security/data/fix/linux/rhsa-2019-2925.md) | Sep 30, 2019 |
| Linux | nodejs-docs ol 8 | 1:10.14.1-1.module+el8.0.0+5349+4d6b561f | [ELSA-2019-2925](https://patchblox.com/security/data/fix/linux/elsa-2019-2925.md) | Sep 30, 2019 |
| Linux | nodejs-nodemon RHEL 8 | 0:1.18.3-1.module+el8+2632+6c5111ed | [RHSA-2019:2925](https://patchblox.com/security/data/fix/linux/rhsa-2019-2925.md) | Sep 30, 2019 |
| Linux | nodejs-nodemon ol 8 | 0:1.18.3-1.module+el8.0.0+5349+4d6b561f | [ELSA-2019-2925](https://patchblox.com/security/data/fix/linux/elsa-2019-2925.md) | Sep 30, 2019 |
| Linux | nodejs-packaging RHEL 8 | 0:17-3.module+el8+2873+aa7dfd9a | [RHSA-2019:2925](https://patchblox.com/security/data/fix/linux/rhsa-2019-2925.md) | Sep 30, 2019 |
| Linux | nodejs-packaging ol 8 | 0:17-3.module+el8.0.0+5349+4d6b561f | [ELSA-2019-2925](https://patchblox.com/security/data/fix/linux/elsa-2019-2925.md) | Sep 30, 2019 |
| Linux | npm RHEL 8 | 1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda | [RHSA-2019:2925](https://patchblox.com/security/data/fix/linux/rhsa-2019-2925.md) | Sep 30, 2019 |
| Linux | npm ol 8 | 1:6.4.1-1.10.14.1.1.module+el8.0.0+5349+4d6b561f | [ELSA-2019-2925](https://patchblox.com/security/data/fix/linux/elsa-2019-2925.md) | Sep 30, 2019 |

---

Data as of 2026-11-07T18:46:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.