CVE-2016-0746
published 2016-02-15CVE-2016-0746: Use-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (worker…
critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
Use-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (worker process crash) or possibly have unspecified other impact via a crafted DNS response related to CNAME response processing.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | xcode | < 13.0 | 13.0 |
| apple | xcode | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | nginx | < nginx 1.9.10-1 (bookworm) | nginx 1.9.10-1 (bookworm) |
| f5 | nginx | >= 0 < 1.9.10-1 | 1.9.10-1 |
| f5 | nginx | >= 0 < 1.9.10-1 | 1.9.10-1 |
| f5 | nginx | >= 0 < 1.9.10-1 | 1.9.10-1 |
| f5 | nginx | >= 0 < 1.9.10-1 | 1.9.10-1 |
| f5 | nginx | >= 0 < 1.4.6-1ubuntu3.4 | 1.4.6-1ubuntu3.4 |
| f5 | nginx | 0.6.18 – 1.8.0 | — |
| f5 | nginx | >= 1.9.0 < 1.9.10 | 1.9.10 |
| opensuse | leap | — | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv9.8CRITICAL