Skip to content
OpenAdvisories
Unscored USN-2991-1 1 CVE

nginx vulnerability

Published Jun 2, 2016 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that nginx incorrectly handled saving client request
bodies to temporary files. A remote attacker could possibly use this issue
to cause nginx to crash, resulting in a denial of service.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS nginx 1.4.6-1ubuntu3.5
Ubuntu · 16.04 LTS 16.04:LTS nginx 1.10.0-0ubuntu0.16.04.2

Vulnerabilities 1

  • Unscored —
    CVE-2016-4450 EPSS 16%

    os/unix/ngx_files.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to cause a denial of servic…

    nginx nginx Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2016-4450