Vulnerability

Nginx DNS UDP Packet Handler Crash Denial Of Service Vulnerability (CVE-2016-0742)

Publish date: January 11, 2017

SEVERITY

CRITICAL


DESCRIPTION

A denial-of-service vulnerability has been reported in NGINX. The vulnerability is due to nginx dereferencing an invalid pointer while processing certain DNS packets. A remote attacker could exploit this vulnerability by forging UDP packets as if from a trusted DNS server. Successful exploitation attempt may result in denial-of-service condition.

TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

SOLUTION

FILTER IDENTIFIER NUMBER: 1008085

Featured Stories

Connect with us on