MGASA-2016-0216
Dashboard / Vulnerabilities / MGASA-2016-0216
Summary: Updated nginx packages fix CVE-2016-4450
Details: Updated nginx package fixes security vulnerability: A problem was identified in nginx code responsible for saving client request body to a temporary file. A specially crafted request might result in worker process crash due to a NULL pointer dereference while writing client request body to a temporary file (CVE-2016-4450).
References: https://advisories.mageia.org/MGASA-2016-0216.html, https://bugs.mageia.org/show_bug.cgi?id=18595
Affected packages
Package
Name: nginx
Purl: pkg:rpm/mageia/nginx?arch=source&distro=mageia-5
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -1.6.2-5.2.mga5
Affected versions
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
