CVE-2016-4450: Null Pointer Dereference
A vulnerability was found in nginx code responsible for saving client request body to a temporary file. A specially crafted request might result in worker process crash due to a NULL pointer dereference while writing client request body to a temporary file.
External references:
http://mailman.nginx.org/pipermail/nginx-announce/2016/000179.html
Upstream patches:
[nginx 1.9.13 - 1.11.0] http://nginx.org/download/patch.2016.write.txt
[nginx 1.3.9 - 1.9.12] http://nginx.org/download/patch.2016.write2.txt
Other sources
os/unix/ngxfiles.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a crafted request, involving writing a client request body to a temporary file.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4450?
CVE-2016-4450 has a high severity rating as it may cause worker process crashes.
How do I fix CVE-2016-4450?
To fix CVE-2016-4450, update nginx to version 1.11.1 or 1.10.1, or apply appropriate patches.
Which versions of nginx are affected by CVE-2016-4450?
CVE-2016-4450 affects nginx versions prior to 1.11.1 and 1.10.1.
What is the impact of exploiting CVE-2016-4450?
Exploiting CVE-2016-4450 can lead to a denial of service due to a crash of the nginx worker process.
On which operating systems does CVE-2016-4450 occur?
CVE-2016-4450 can occur on multiple operating systems including specific versions of Ubuntu, Debian, and Red Hat-based distributions.