CVE

Id
87042  
CVE No.
CVE-2016-0746  
Status
Candidate  
Description
Use-after-free vulnerability in the resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (worker process crash) or possibly have unspecified other impact via a crafted DNS response related to CNAME response processing.  
Phase
Assigned (20151216)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
761856 87042 CVE-2016-0746 MLIST:[nginx] 20160126 nginx security advisory (CVE-2016-0742, CVE-2016-0746, CVE-2016-0747)  View
761857 87042 CVE-2016-0746 URL:http://mailman.nginx.org/pipermail/nginx/2016-January/049700.html  View
761858 87042 CVE-2016-0746 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1302588  View
761859 87042 CVE-2016-0746 CONFIRM:https://bto.bluecoat.com/security-advisory/sa115  View
761860 87042 CVE-2016-0746 DEBIAN:DSA-3473  View
761861 87042 CVE-2016-0746 URL:http://www.debian.org/security/2016/dsa-3473  View
761862 87042 CVE-2016-0746 SUSE:openSUSE-SU-2016:0371  View
761863 87042 CVE-2016-0746 URL:http://lists.opensuse.org/opensuse-updates/2016-02/msg00042.html  View
761864 87042 CVE-2016-0746 UBUNTU:USN-2892-1  View
761865 87042 CVE-2016-0746 URL:http://www.ubuntu.com/usn/USN-2892-1  View
761866 87042 CVE-2016-0746 SECTRACK:1034869  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
1382 JVNDB-2016-002155 Android のメディアサーバの Sonivox における任意のコードを実行される脆弱性 Android のメディアサーバの Sonivox は、サンプルの負の数をチェックしないため、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2016-0838 87042 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002155.html  View