CVE-2016-1247

The nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6-1ubuntu3.6 on Ubuntu 14.04 LTS, before 1.10.0-0ubuntu0.16.04.3 on Ubuntu 16.04 LTS, and before 1.10.1-0ubuntu1.1 on Ubuntu 16.10, and the nginx ebuild before 1.10.2-r3 on Gentoo allow local users with access to the web server user account to gain root privileges via a symlink attack on the error log.

Database specific

{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "33"
                },
                {
                    "last_affected": "33"
                },
                {
                    "introduced": "34"
                },
                {
                    "last_affected": "34"
                },
                {
                    "introduced": "35"
                },
                {
                    "last_affected": "35"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "fedoraproject:fedora",
            "cpes": [
                "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
                "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
                "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*"
            ]
        }
    ]
}

References

Affected packages

Git / github.com/nginx/nginx

Affected ranges

Type

GIT

Repo

https://github.com/nginx/nginx

Events

Introduced

Last affected

e32426747fa56ab92dd6b5432ee57c912413e46a

Last affected

9842cfffbfa0f0237640ea44d03d7d56663e9a7a

Last affected

f08055a847912de44496b74a0fc664b1b489c331

Last affected

e6181edce34a72644bf520d1fc1d5b6d40a9e841

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.10.1"
        },
        {
            "last_affected": "1.10.0"
        },
        {
            "last_affected": "1.6.2"
        },
        {
            "last_affected": "1.4.3"
        }
    ],
    "source": "CPE_RANGE",
    "cpe": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*"
}

Affected versions

release-0.*

release-0.1.0

release-0.1.1

release-0.1.10

release-0.1.11

release-0.1.12

release-0.1.13

release-0.1.14

release-0.1.15

release-0.1.16

release-0.1.17

release-0.1.18

release-0.1.19

release-0.1.2

release-0.1.20

release-0.1.21

release-0.1.22

release-0.1.23

release-0.1.24

release-0.1.25

release-0.1.26

release-0.1.27

release-0.1.28

release-0.1.29

release-0.1.3

release-0.1.30

release-0.1.31

release-0.1.32

release-0.1.33

release-0.1.34

release-0.1.35

release-0.1.36

release-0.1.37

release-0.1.38

release-0.1.39

release-0.1.4

release-0.1.40

release-0.1.41

release-0.1.42

release-0.1.43

release-0.1.44

release-0.1.45

release-0.1.5

release-0.1.6

release-0.1.7

release-0.1.8

release-0.1.9

release-0.2.0

release-0.2.1

release-0.2.2

release-0.2.3

release-0.2.4

release-0.2.5

release-0.2.6

release-0.3.0

release-0.3.1

release-0.3.10

release-0.3.11

release-0.3.12

release-0.3.13

release-0.3.14

release-0.3.15

release-0.3.16

release-0.3.17

release-0.3.18

release-0.3.19

release-0.3.2

release-0.3.20

release-0.3.21

release-0.3.22

release-0.3.23

release-0.3.24

release-0.3.25

release-0.3.26

release-0.3.27

release-0.3.28

release-0.3.29

release-0.3.3

release-0.3.30

release-0.3.31

release-0.3.32

release-0.3.33

release-0.3.34

release-0.3.35

release-0.3.36

release-0.3.37

release-0.3.38

release-0.3.39

release-0.3.4

release-0.3.40

release-0.3.41

release-0.3.42

release-0.3.43

release-0.3.44

release-0.3.45

release-0.3.46

release-0.3.47

release-0.3.48

release-0.3.49

release-0.3.5

release-0.3.50

release-0.3.51

release-0.3.52

release-0.3.53

release-0.3.54

release-0.3.55

release-0.3.56

release-0.3.57

release-0.3.58

release-0.3.59

release-0.3.6

release-0.3.60

release-0.3.61

release-0.3.7

release-0.3.8

release-0.3.9

release-0.4.0

release-0.4.1

release-0.4.10

release-0.4.11

release-0.4.12

release-0.4.13

release-0.4.14

release-0.4.2

release-0.4.3

release-0.4.4

release-0.4.5

release-0.4.6

release-0.4.7

release-0.4.8

release-0.4.9

release-0.5.0

release-0.5.1

release-0.5.10

release-0.5.11

release-0.5.12

release-0.5.13

release-0.5.14

release-0.5.15

release-0.5.16

release-0.5.17

release-0.5.18

release-0.5.19

release-0.5.2

release-0.5.20

release-0.5.21

release-0.5.22

release-0.5.23

release-0.5.24

release-0.5.25

release-0.5.3

release-0.5.4

release-0.5.5

release-0.5.6

release-0.5.7

release-0.5.8

release-0.5.9

release-0.6.0

release-0.6.1

release-0.6.10

release-0.6.11

release-0.6.12

release-0.6.13

release-0.6.14

release-0.6.15

release-0.6.16

release-0.6.17

release-0.6.18

release-0.6.19

release-0.6.2

release-0.6.20

release-0.6.21

release-0.6.22

release-0.6.23

release-0.6.24

release-0.6.25

release-0.6.26

release-0.6.27

release-0.6.28

release-0.6.29

release-0.6.3

release-0.6.30

release-0.6.31

release-0.6.4

release-0.6.5

release-0.6.6

release-0.6.7

release-0.6.8

release-0.6.9

release-0.7.0

release-0.7.1

release-0.7.10

release-0.7.11

release-0.7.12

release-0.7.13

release-0.7.14

release-0.7.15

release-0.7.16

release-0.7.17

release-0.7.18

release-0.7.19

release-0.7.2

release-0.7.20

release-0.7.21

release-0.7.22

release-0.7.23

release-0.7.24

release-0.7.25

release-0.7.26

release-0.7.27

release-0.7.28

release-0.7.29

release-0.7.3

release-0.7.30

release-0.7.31

release-0.7.32

release-0.7.33

release-0.7.34

release-0.7.35

release-0.7.36

release-0.7.37

release-0.7.38

release-0.7.39

release-0.7.4

release-0.7.40

release-0.7.41

release-0.7.42

release-0.7.43

release-0.7.44

release-0.7.45

release-0.7.46

release-0.7.47

release-0.7.48

release-0.7.49

release-0.7.5

release-0.7.50

release-0.7.51

release-0.7.52

release-0.7.53

release-0.7.54

release-0.7.55

release-0.7.56

release-0.7.57

release-0.7.58

release-0.7.59

release-0.7.6

release-0.7.7

release-0.7.8

release-0.7.9

release-0.8.0

release-0.8.1

release-0.8.10

release-0.8.11

release-0.8.12

release-0.8.13

release-0.8.14

release-0.8.15

release-0.8.16

release-0.8.17

release-0.8.18

release-0.8.19

release-0.8.2

release-0.8.20

release-0.8.21

release-0.8.22

release-0.8.23

release-0.8.24

release-0.8.25

release-0.8.26

release-0.8.27

release-0.8.28

release-0.8.29

release-0.8.3

release-0.8.30

release-0.8.31

release-0.8.32

release-0.8.33

release-0.8.34

release-0.8.35

release-0.8.36

release-0.8.37

release-0.8.38

release-0.8.39

release-0.8.4

release-0.8.40

release-0.8.41

release-0.8.42

release-0.8.43

release-0.8.44

release-0.8.45

release-0.8.46

release-0.8.47

release-0.8.48

release-0.8.49

release-0.8.5

release-0.8.50

release-0.8.51

release-0.8.52

release-0.8.53

release-0.8.6

release-0.8.7

release-0.8.8

release-0.8.9

release-0.9.0

release-0.9.1

release-0.9.2

release-0.9.3

release-0.9.4

release-0.9.5

release-0.9.6

release-0.9.7

release-1.*

release-1.0.0

release-1.0.1

release-1.0.2

release-1.0.3

release-1.0.4

release-1.0.5

release-1.1.0

release-1.1.1

release-1.1.10

release-1.1.11

release-1.1.12

release-1.1.13

release-1.1.14

release-1.1.15

release-1.1.16

release-1.1.17

release-1.1.18

release-1.1.19

release-1.1.2

release-1.1.3

release-1.1.4

release-1.1.5

release-1.1.6

release-1.1.7

release-1.1.8

release-1.1.9

release-1.10.0

release-1.10.1

release-1.2.0

release-1.3.0

release-1.3.1

release-1.3.10

release-1.3.11

release-1.3.12

release-1.3.13

release-1.3.14

release-1.3.15

release-1.3.16

release-1.3.2

release-1.3.3

release-1.3.4

release-1.3.5

release-1.3.6

release-1.3.7

release-1.3.8

release-1.3.9

release-1.4.0

release-1.4.1

release-1.4.2

release-1.4.3

release-1.5.0

release-1.5.1

release-1.5.10

release-1.5.11

release-1.5.12

release-1.5.13

release-1.5.2

release-1.5.3

release-1.5.4

release-1.5.5

release-1.5.6

release-1.5.7

release-1.5.8

release-1.5.9

release-1.6.0

release-1.6.1

release-1.6.2

release-1.7.0

release-1.7.1

release-1.7.10

release-1.7.11

release-1.7.12

release-1.7.2

release-1.7.3

release-1.7.4

release-1.7.5

release-1.7.6

release-1.7.7

release-1.7.8

release-1.7.9

release-1.9.0

release-1.9.1

release-1.9.10

release-1.9.11

release-1.9.12

release-1.9.13

release-1.9.14

release-1.9.15

release-1.9.2

release-1.9.3

release-1.9.4

release-1.9.5

release-1.9.6

release-1.9.7

release-1.9.8

release-1.9.9

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-1247.json"