View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2016-4450 severity moderate: SUSE including 18 source package names (nginx, nginx-1.0-1.0.15-0.34.1, …), 23 product×package rows across 16 product lines (SUSE Lifecycle Management Server 1.3, SUSE Linux Enterprise High Performance Computing 15-LTSS, … (16 product lines)): Fixed 19, Known Not Affected 4.
os/unix/ngx_files.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a crafted request, involving writing a client request body to a temporary file.