Skip to content
OpenAdvisories
Unscored USN-3114-1 1 CVE

nginx vulnerability

Published Oct 25, 2016 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Dawid Golunski discovered that the nginx package incorrectly handled log
file permissions. A remote attacker could possibly use this issue to obtain
root privileges.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS nginx 1.4.6-1ubuntu3.6
Ubuntu · 16.04 LTS 16.04:LTS nginx 1.10.0-0ubuntu0.16.04.3

Vulnerabilities 1

  • Unscored —
    CVE-2016-1247 Public exploit

    The nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6-1ubuntu3.6 on Ubuntu 14.04 LT…

    nginx nginx Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2016-1247