CVE-2016-4450

CVE-2016-4450 is a denial-of-service vulnerability affecting Nginx versions prior to 1.10.1 and 1.11.1, as well as various distributions including Canonical, Debian, and F5. A remote attacker can trigger a NULL pointer dereference and crash a worker process by sending a crafted request that involves writing a client request body to a temporary file. This vulnerability has a CVSS score of 7.5 (High), indicating a network-exploitable attack with low complexity and a high impact on availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it has received some community discussion and media coverage.