CVE-2016-1247

score

<0.1

cvss

7.8

epss

4.9%

published

2016-11-29

kev added

—

first seen

2026-10-21

nginx before 1.6.2-5+deb8u3 on Debian, before 1.4.6-1ubuntu3.6 on Ubuntu 14.04, before 1.10.0-0ubuntu0.16.04.3 on Ubuntu 16.04, before 1.10.1-0ubuntu1.1 on Ubuntu 16.10, and before 1.10.2-r3 on Gentoo contain a privilege escalation caused by a symlink attack on the error log, letting local users with access to the web server user account gain root privileges.