CVE-2016-1247
First published: Tue Nov 29 2016(Updated: )
The nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6-1ubuntu3.6 on Ubuntu 14.04 LTS, before 1.10.0-0ubuntu0.16.04.3 on Ubuntu 16.04 LTS, and before 1.10.1-0ubuntu1.1 on Ubuntu 16.10, and the nginx ebuild before 1.10.2-r3 on Gentoo allow local users with access to the web server user account to gain root privileges via a symlink attack on the error log.
Credit: security@debian.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| F5 NGINX App Protect | <=1.10.1 | |
| Ubuntu | =16.10 | |
| F5 NGINX App Protect | <=1.10.0 | |
| Ubuntu | =16.04 | |
| F5 NGINX App Protect | <=1.6.2 | |
| Debian | =8.0 | |
| F5 NGINX App Protect | <=1.4.3 | |
| Ubuntu | =14.04 | |
| Fedora | =33 | |
| Fedora | =34 | |
| Fedora | =35 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/139750/Nginx-Debian-Based-Distros-Root-Privilege-Escalation.html
- http://seclists.org/fulldisclosure/2016/Nov/78
- http://seclists.org/fulldisclosure/2017/Jan/33
- http://www.debian.org/security/2016/dsa-3701
- http://www.securityfocus.com/archive/1/539796/100/0/threaded
- http://www.securityfocus.com/bid/93903
- http://www.securitytracker.com/id/1037104
- http://www.ubuntu.com/usn/USN-3114-1
- https://legalhackers.com/advisories/Nginx-Exploit-Deb-Root-PrivEsc-CVE-2016-1247.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CBIZEKHBOCKO7FUMCO4X53ENMWU5OYFX/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ESTIADC7BDB6VTH4JAP6C6OCW2CQ4NHP/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P3WOO7E5R2HT5XVOIOFPEFALILVOWZUF/
- https://security.gentoo.org/glsa/201701-22
- https://www.exploit-db.com/exploits/40768/
- https://www.youtube.com/watch?v=aTswN1k1fQs
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P3WOO7E5R2HT5XVOIOFPEFALILVOWZUF/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ESTIADC7BDB6VTH4JAP6C6OCW2CQ4NHP/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CBIZEKHBOCKO7FUMCO4X53ENMWU5OYFX/
Frequently Asked Questions
What is the severity of CVE-2016-1247?
CVE-2016-1247 is classified as a critical vulnerability that allows local users to escalate privileges.
How do I fix CVE-2016-1247?
To fix CVE-2016-1247, upgrade the nginx package to the latest version available for your operating system that is not affected.
Which versions of nginx are affected by CVE-2016-1247?
CVE-2016-1247 affects nginx versions before 1.6.2-5+deb8u3 on Debian and variations on Ubuntu up to version 1.10.1.
Can CVE-2016-1247 be exploited remotely?
CVE-2016-1247 is not a remote vulnerability; it requires local user access to exploit.
What systems are impacted by CVE-2016-1247?
CVE-2016-1247 affects Debian Jessie, Ubuntu 14.04 LTS, and Ubuntu 16.04 LTS among others.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/author
- agent/references
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/f5
- canonical/f5 nginx app protect
- version/f5 nginx app protect/1.10.1
- vendor/canonical
- canonical/ubuntu
- version/ubuntu/16.10
- version/f5 nginx app protect/1.10.0
- version/ubuntu/16.04
- version/f5 nginx app protect/1.6.2
- vendor/debian
- canonical/debian
- version/debian/8.0
- version/f5 nginx app protect/1.4.3
- version/ubuntu/14.04
- vendor/fedoraproject
- canonical/fedora
- version/fedora/33
- version/fedora/34
- version/fedora/35