Nginx DNS UDP Packet Handler Crash Denial Of Service Vulnerability (CVE-2016-0742)
Publish Date: 11 Januar 2017
Schweregrad:: Kritisch
Beschreibung
A denial-of-service vulnerability has been reported in NGINX. The vulnerability is due to nginx dereferencing an invalid pointer while processing certain DNS packets.
A remote attacker could exploit this vulnerability by forging UDP packets as if from a trusted DNS server. Successful exploitation attempt may result in denial-of-service condition.
Trend Micro Lösungen
Apply associated Trend Micro DPI Rules.
Lösungen
Trend Micro Deep Security DPI Rule Number: 1008085