Red Hat Security AdvisoryRHSA-2016:1425
rh-nginx18-nginx security update
Released 2016-07-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-nginx18-nginx-1:1.8.1-1.el6
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-nginx18-nginx-1:1.8.1-1.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6) rh-nginx18-nginx-1:1.8.1-1.el6
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) rh-nginx18-nginx-1:1.8.1-1.el6
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1) rh-nginx18-nginx-1:1.8.1-1.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2) rh-nginx18-nginx-1:1.8.1-1.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-nginx18-nginx-1:1.8.1-1.el6
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-nginx18-nginx-1:1.8.1-1.el7
Fixes 4 records
Priority HIGH 74
The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (invalid pointer dereference and worker process crash) via a crafted UDP DNS response.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.82377 · Published 2016-02-15 · Partial fix CWE-476
Priority MEDIUM 53
Use-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (worker process crash) or possibly have unspecified other impact via…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0886 · Published 2016-02-15 · Partial fix CWE-416
Priority MEDIUM 49
os/unix/ngx_files.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a crafted request, involving writing a clie…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.16376 · Published 2016-06-07 · Partial fix CWE-476
Priority LOW 35
The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME resolution, which allows remote attackers to cause a denial of service (worker process resource consumption) via vectors related to…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.08664 · Published 2016-02-15 · Partial fix CWE-400
THREATIST.IORead the docs