[USN-2892-1] nginx vulnerabilities
marc.deslauriers at canonical.com
Tue Feb 9 18:26:04 UTC 2016
Ubuntu Security Notice USN-2892-1
February 09, 2016
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 15.10
- Ubuntu 14.04 LTS
Several security issues were fixed in nginx.
- nginx: small, powerful, scalable web/proxy server
It was discovered that nginx incorrectly handled certain DNS server
responses when the resolver is enabled. A remote attacker could possibly
use this issue to cause nginx to crash, resulting in a denial of service.
It was discovered that nginx incorrectly handled CNAME response processing
when the resolver is enabled. A remote attacker could use this issue to
cause nginx to crash, resulting in a denial of service, or possibly execute
arbitrary code. (CVE-2016-0746)
It was discovered that nginx incorrectly handled CNAME resolution when
the resolver is enabled. A remote attacker could possibly use this issue to
cause nginx to consume resources, resulting in a denial of service.
The problem can be corrected by updating your system to the following
Ubuntu 14.04 LTS:
In general, a standard system update will make all the necessary changes.
CVE-2016-0742, CVE-2016-0746, CVE-2016-0747
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 819 bytes
Desc: OpenPGP digital signature
More information about the ubuntu-security-announce