Medium: nginx

🗓️ 19 Feb 2016 00:00:00Reported by AmazonType

amazon

amazon🔗 alas.aws.amazon.com👁 50 Views

nginx security update for out of bounds read, use-after-free, and DNS recursion issue

Reporter	Title	Published	Views	Family All 87
ALT Linux	Security fix for the ALT Linux 9 package nginx version 1.8.1-alt1	1 Feb 201600:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities with the Nginx web server used in IBM Aspera Shares 1.9.2 and earlier	8 Dec 201804:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is affected by PHP (CVE-2015-9253) and nginx (CVE-2016-0746) vulnerabilities	12 Aug 202117:41	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in nginx affect PowerKVM	18 Jun 201801:33	–	ibm
Tenable Nessus	Amazon Linux AMI : nginx (ALAS-2016-655)	4 Mar 201600:00	–	nessus
Tenable Nessus	Debian DLA-404-1 : nginx security update	28 Jan 201600:00	–	nessus
Tenable Nessus	Debian DSA-3473-1 : nginx - security update	12 Feb 201600:00	–	nessus
Tenable Nessus	Fedora 22 : nginx-1.8.1-1.fc22 (2016-bf03932bb3)	4 Mar 201600:00	–	nessus
Tenable Nessus	Fedora 23 : nginx-1.8.1-1.fc23 (2016-fd3428577d)	4 Mar 201600:00	–	nessus
Tenable Nessus	FreeBSD : nginx -- multiple vulnerabilities (c1c18ee1-c711-11e5-96d6-14dae9d210b8)	1 Feb 201600:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Amazon Linux	1	i686	nginx	1.8.1-1.26.amzn1	nginx-1.8.1-1.26.amzn1.i686.rpm
Amazon Linux	1	x86_64	nginx	1.8.1-1.26.amzn1	nginx-1.8.1-1.26.amzn1.x86_64.rpm
Amazon Linux	1	i686	nginx-debuginfo	1.8.1-1.26.amzn1	nginx-debuginfo-1.8.1-1.26.amzn1.i686.rpm
Amazon Linux	1	x86_64	nginx-debuginfo	1.8.1-1.26.amzn1	nginx-debuginfo-1.8.1-1.26.amzn1.x86_64.rpm

19 Feb 2016 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 27.5

CVSS 3.19.8

EPSS0.78788

nginx security update out of bounds read use-after-free dns recursion