CVE

Id
87043  
CVE No.
CVE-2016-0747  
Status
Candidate  
Description
The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME resolution, which allows remote attackers to cause a denial of service (worker process resource consumption) via vectors related to arbitrary name resolution.  
Phase
Assigned (20151216)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
761867 87043 CVE-2016-0747 MLIST:[nginx] 20160126 nginx security advisory (CVE-2016-0742, CVE-2016-0746, CVE-2016-0747)  View
761868 87043 CVE-2016-0747 URL:http://mailman.nginx.org/pipermail/nginx/2016-January/049700.html  View
761869 87043 CVE-2016-0747 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1302589  View
761870 87043 CVE-2016-0747 CONFIRM:https://bto.bluecoat.com/security-advisory/sa115  View
761871 87043 CVE-2016-0747 DEBIAN:DSA-3473  View
761872 87043 CVE-2016-0747 URL:http://www.debian.org/security/2016/dsa-3473  View
761873 87043 CVE-2016-0747 SUSE:openSUSE-SU-2016:0371  View
761874 87043 CVE-2016-0747 URL:http://lists.opensuse.org/opensuse-updates/2016-02/msg00042.html  View
761875 87043 CVE-2016-0747 UBUNTU:USN-2892-1  View
761876 87043 CVE-2016-0747 URL:http://www.ubuntu.com/usn/USN-2892-1  View
761877 87043 CVE-2016-0747 SECTRACK:1034869  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
1383 JVNDB-2016-002156 Android のメディアサーバの post_proc/volume_listener.c における任意のコードを実行される脆弱性 Android のメディアサーバの post_proc/volume_listener.c は、削除されたエフェクトコンテキストを誤って処理するため、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2016-0839 87043 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002156.html  View