nginx: denial of service
| Package(s): | nginx | CVE #(s): | CVE-2016-4450 | ||||||||||||||||||||||||||||||||||||||||
| Created: | June 2, 2016 | Updated: | February 2, 2017 | ||||||||||||||||||||||||||||||||||||||||
| Description: | From the Arch Linux advisory:
A vulnerability was found in nginx code responsible for saving client request body to a temporary file. A specially crafted request might result in worker process crash due to a NULL pointer dereference while handling the client request body. A remote attacker is able to use a specially crafted request to crash the worker resulting in denial of service. | ||||||||||||||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||||||||||||||