Lucene search
Gentoo FoundationGLSA-201606-06HistoryJun 17, 2016 - 12:00 a.m.
nginx: Multiple vulnerabilities
2016-06-1700:00:00
Gentoo Foundation
security.gentoo.org
65
0.871 High
EPSS
Percentile
98.6%
Background
nginx is a robust, small, and high performance HTTP and reverse proxy server.
Description
Multiple vulnerabilities have been discovered in nginx. Please review the CVE identifiers referenced below for details.
Impact
A remote attacker could possibly cause a Denial of Service condition via a crafted packet.
Workaround
There is no known workaround at this time.
Resolution
All nginx users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=www-servers/nginx-1.10.1"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | www-servers/nginx | <Â 1.10.1 | UNKNOWN |
Related
nessus
nessus
GLSA-201606-06 : nginx: Multiple vulnerabilities
2017-10-02 00:00:00
nginx < 1.8.1 / 1.9.x < 1.9.10 Multiple Vulnerabilities
2018-03-09 00:00:00
Amazon Linux AMI : nginx (ALAS-2016-655)
2016-03-04 00:00:00
ibm
ibm
redhat
redhat
(RHSA-2016:1425) Moderate: rh-nginx18-nginx security update
2016-07-14 04:53:33
openvas
openvas
Mageia: Security Advisory (MGASA-2016-0065)
2016-02-18 00:00:00
Debian: Security Advisory (DSA-3473-1)
2016-02-10 00:00:00
Debian Security Advisory DSA 3473-1 (nginx - security update)
2016-02-11 00:00:00
mageia
mageia
Updated nginx packages fix security vulnerabilities
2016-02-17 22:06:01
Updated nginx packages fix CVE-2016-4450
2016-06-03 00:40:03
amazon
amazon
Medium: nginx
2016-02-19 15:50:00
Medium: nginx
2016-06-15 13:30:00
altlinux
altlinux
Security fix for the ALT Linux 9 package nginx version 1.8.1-alt1
2016-02-01 00:00:00
Security fix for the ALT Linux 9 package nginx version 1.10.1-alt1
2016-06-01 00:00:00
symantec
symantec
SA115 : Multiple nginx DNS resolver vulnerabilities
2016-03-11 08:00:00
archlinux
archlinux
nginx: denial of service
2016-01-27 00:00:00
nginx-mainline: denial of service
2016-06-01 00:00:00
f5
f5
SOL23073482 - Nginx vulnerabilities CVE-2016-0742, CVE-2016-0746, and CVE-2016-0747
2016-05-11 00:00:00
K23073482 : Nginx vulnerabilities CVE-2016-0742, CVE-2016-0746, and CVE-2016-0747
2016-05-11 00:00:00
K14634 : SSL/TLS BREACH vulnerability CVE-2013-3587
2014-11-21 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: nginx-1.8.1-1.fc22
2016-02-05 21:53:02
[SECURITY] Fedora 23 Update: nginx-1.8.1-1.fc23
2016-01-30 18:27:06
[SECURITY] Fedora 24 Update: nginx-1.10.1-1.fc24
2016-06-18 19:48:54
freebsd
freebsd
nginx -- multiple vulnerabilities
2016-01-26 00:00:00
nginx -- a specially crafted request might result in worker process crash
2016-05-31 00:00:00
hackerone
hackerone
Legal Robot: SSL BREACH attack (CVE-2013-3587)
2017-07-30 08:51:28
apple
apple
About the security content of Xcode 13
2021-09-20 00:00:00
cve
cve
checkpoint_advisories
checkpoint_advisories
Nginx DNS Resolver Denial of Service (CVE-2016-0742)
2016-04-10 00:00:00
debiancve
debiancve
nginx
nginx
Insufficient limits of CNAME resolution in resolver
2016-02-15 19:59:02
Use-after-free during CNAME response processing in resolver
2016-02-15 19:59:01
Invalid pointer dereference in resolver
2016-02-15 19:59:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:12:21
Denial Of Service (DoS)
2019-05-02 05:35:15
Denial Of Service (DoS)
2019-05-02 05:35:15
cvelist
cvelist
ubuntucve
ubuntucve
prion
prion
Authentication flaw
2016-02-15 19:59:00
Null pointer dereference
2016-02-15 19:59:00
Design/Logic Flaw
2016-02-15 19:59:00
cloudfoundry
cloudfoundry
USN-2991-1 nginx vulnerability | Cloud Foundry
2016-06-13 00:00:00
CVE-2016-4450 Nginx Vulnerabilities | Cloud Foundry
2016-07-13 00:00:00
redhatcve
redhatcve
CVE-2016-4450
2016-06-01 06:48:27
arista
arista
Security Advisory 0021
2016-06-13 00:00:00
cert
cert
BREACH vulnerability in compressed HTTPS
2013-08-02 00:00:00
photon
photon