Critical severity9.8NVD Advisory· Published Feb 15, 2016· Updated May 6, 2026
CVE-2016-0746
CVE-2016-0746
Description
Use-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (worker process crash) or possibly have unspecified other impact via a crafted DNS response related to CNAME response processing.
Affected products
7cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*+ 1 more
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
11- bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
- lists.opensuse.org/opensuse-updates/2016-02/msg00042.htmlnvdMailing ListThird Party Advisory
- mailman.nginx.org/pipermail/nginx/2016-January/049700.htmlnvdVendor Advisory
- seclists.org/fulldisclosure/2021/Sep/36nvdMailing ListThird Party Advisory
- www.debian.org/security/2016/dsa-3473nvdThird Party Advisory
- www.securitytracker.com/id/1034869nvdThird Party AdvisoryVDB Entry
- www.ubuntu.com/usn/USN-2892-1nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2016:1425nvdThird Party Advisory
- bto.bluecoat.com/security-advisory/sa115nvdThird Party Advisory
- security.gentoo.org/glsa/201606-06nvdThird Party Advisory
- support.apple.com/kb/HT212818nvdThird Party Advisory
News mentions
0No linked articles in our index yet.