onyx --cves cve-2016-0742
CVE-2016-0742
- score
- <0.1
- cvss
- 7.5
- epss
- 82.4%
- published
- 2016-02-15
- kev added
- —
- first seen
nginx before 1.8.1 and 1.9.x before 1.9.10 contain a denial of service caused by invalid pointer dereference in resolver when processing crafted UDP DNS responses, letting remote attackers crash worker processes, exploit requires sending malicious DNS responses.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
References 11
- http://www.debian.org/security/2016/dsa-3473
- http://www.securitytracker.com/id/1034869
- http://www.ubuntu.com/usn/USN-2892-1
- https://support.apple.com/kb/HT212818
- http://seclists.org/fulldisclosure/2021/Sep/36
- https://access.redhat.com/errata/RHSA-2016:1425
- https://bto.bluecoat.com/security-advisory/sa115
- https://bugzilla.redhat.com/show_bug.cgi?id=1302587
- https://security.gentoo.org/glsa/201606-06
- http://mailman.nginx.org/pipermail/nginx/2016-January/049700.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00042.html