CVE-2016-4450

os/unix/ngx_files.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a crafted request, involving writing a client request body to a temporary file.

• CWE-476

• http://mailman.nginx.org/pipermail/nginx-announce/2016/000179.htmlVendor Advisory
• http://www.debian.org/security/2016/dsa-3592Third Party Advisory
• http://www.securityfocus.com/bid/90967Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1036019Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2991-1Third Party Advisory
• https://access.redhat.com/errata/RHSA-2016:1425Third Party Advisory
• https://security.gentoo.org/glsa/201606-06Third Party Advisory
• http://mailman.nginx.org/pipermail/nginx-announce/2016/000179.htmlVendor Advisory
• http://www.debian.org/security/2016/dsa-3592Third Party Advisory
• http://www.securityfocus.com/bid/90967Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1036019Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2991-1Third Party Advisory
• https://access.redhat.com/errata/RHSA-2016:1425Third Party Advisory
• https://security.gentoo.org/glsa/201606-06Third Party Advisory

Published

Jun 7, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-4444The allow_execmod plugin for setroubleshoot before 3.2.23 al…
• CVE-2016-4445The fix_lookup_id function in sealert in setroubleshoot befo…
• CVE-2016-4446The allow_execstack plugin for setroubleshoot allows local u…
• CVE-2016-4447The xmlParseElementDecl function in parser.c in libxml2 befo…
• CVE-2016-4448Format string vulnerability in libxml2 before 2.9.4 allows a…9.8
• CVE-2016-4449XML external entity (XXE) vulnerability in the xmlStringLenD…
• CVE-2016-4451The (1) Organization and (2) Locations APIs in Foreman befor…
• CVE-2016-4452Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-4453The vmsvga_fifo_run function in hw/display/vmware_vga.c in Q…4.4
• CVE-2016-4454The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c…6
• CVE-2016-4455The Subscription Manager package (aka subscription-manager) …3.3
• CVE-2016-4456The "GNUTLS_KEYLOGFILE" environment variable in gnutls 3.4.1…7.5