CVE-2016-4450

os/unix/ngx_files.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a crafted request, involving writing a client request body to a temporary file.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:nginx:1.11.0:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

History

21 Nov 2024, 02:52

Type Values Removed Values Added
References () http://mailman.nginx.org/pipermail/nginx-announce/2016/000179.html - Vendor Advisory () http://mailman.nginx.org/pipermail/nginx-announce/2016/000179.html - Vendor Advisory
References () http://www.debian.org/security/2016/dsa-3592 - Third Party Advisory () http://www.debian.org/security/2016/dsa-3592 - Third Party Advisory
References () http://www.securityfocus.com/bid/90967 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/90967 - Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id/1036019 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1036019 - Third Party Advisory, VDB Entry
References () http://www.ubuntu.com/usn/USN-2991-1 - Third Party Advisory () http://www.ubuntu.com/usn/USN-2991-1 - Third Party Advisory
References () https://access.redhat.com/errata/RHSA-2016:1425 - Third Party Advisory () https://access.redhat.com/errata/RHSA-2016:1425 - Third Party Advisory
References () https://security.gentoo.org/glsa/201606-06 - Third Party Advisory () https://security.gentoo.org/glsa/201606-06 - Third Party Advisory

Information

Published : 2016-06-07 14:06

Updated : 2024-11-21 02:52


NVD link : CVE-2016-4450

Mitre link : CVE-2016-4450

CVE.ORG link : CVE-2016-4450


JSON object : View

Products Affected

canonical

  • ubuntu_linux

f5

  • nginx

debian

  • debian_linux
CWE
CWE-476

NULL Pointer Dereference