[FREEBSD:36CF7670-2774-11E6-AF29-F0DEF16C5C1B] nginx -- a specially crafted request might result in worker process crash

Severity High

Affected Packages 2

CVEs 1

Maxim Dounin reports:

  A problem was identified in nginx code responsible for saving
    client request body to a temporary file.  A specially crafted
    request might result in worker process crash due to a NULL
    pointer dereference while writing client request body to a
    temporary file.

Package	Affected Version
pkg:freebsd/nginx-devel	< 1.9.15_1
pkg:freebsd/nginx	< 1.8.1_3,2

ID

FREEBSD:36CF7670-2774-11E6-AF29-F0DEF16C5C1B

Severity

high

Severity from

CVE-2016-4450

URL

http://vuxml.freebsd.org/freebsd/36cf7670-2774-11e6-af29-f0def16c5c1b.html

Published

2016-05-31T00:00:00
(8 years ago)

Modified

2016-05-31T00:00:00
(8 years ago)

Rights

FreeBSD VuXML Security Team

Other Advisories

Source	# ID	Name	URL
FreeBSD VuXML			http://mailman.nginx.org/pipermail/nginx-announce/2016/000179.html

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch	Patch / Fix
Affected	pkg:freebsd/nginx-devel		nginx-devel	< 1.9.15_1
Affected	pkg:freebsd/nginx		nginx	< 1.8.1_3,2

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date