Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 492
Alerts This Week
Warning Icon 1 492

Debian: DSA-2434-1 Moderate: Nginx Memory Leak Remote Attack

debian
Calendar Grey March 19, 2012
Scroller Debian
Security flaw discovered in nginx could leak confidential information in Debian systems. It's crucial to apply the suggested patch immediately to protect your server.
Matthew Daley discovered a memory disclosure vulnerability in nginx
Topics%20covered

Topics Covered

security advisory debian remote attack memory leak information exposure nginx

Summary

Matthew Daley discovered a memory disclosure vulnerability in nginx. In
previous versions of this web server, an attacker can receive the content of
previously freed memory if an upstream server returned a specially crafted HTTP
response, potentially exposing sensitive information.

For the stable distribution (squeeze), this problem has been fixed in
version 0.7.67-3+squeeze2.

For the unstable distribution (sid), this problem has been fixed in
version 1.1.17-1.

We recommend that you upgrade your nginx packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/



Package: nginx
CVE ID: CVE-2012-1180

Topics%20covered

Topics Covered

security advisory debian remote attack memory leak information exposure nginx

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.