onyx --cves cve-2016-0746
CVE-2016-0746
- score
- <0.1
- cvss
- 9.8
- epss
- 8.9%
- published
- 2016-02-15
- kev added
- —
- first seen
nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9.10 contain a use-after-free caused by improper DNS response handling in resolver, letting remote attackers cause denial of service or other impacts via crafted DNS responses related to CNAME processing, exploit requires sending malicious DNS responses.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
References 11
- http://www.securitytracker.com/id/1034869
- http://www.ubuntu.com/usn/USN-2892-1
- https://security.gentoo.org/glsa/201606-06
- http://mailman.nginx.org/pipermail/nginx/2016-January/049700.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00042.html
- https://access.redhat.com/errata/RHSA-2016:1425
- https://bto.bluecoat.com/security-advisory/sa115
- https://bugzilla.redhat.com/show_bug.cgi?id=1302588
- https://support.apple.com/kb/HT212818
- http://seclists.org/fulldisclosure/2021/Sep/36
- http://www.debian.org/security/2016/dsa-3473