Medium severity5.3NVD Advisory· Published Feb 15, 2016· Updated Jun 17, 2026
CVE-2016-0747
CVE-2016-0747
Description
The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME resolution, which allows remote attackers to cause a denial of service (worker process resource consumption) via vectors related to arbitrary name resolution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
15cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*+ 1 more
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
- osv-coords7 versionspkg:rpm/opensuse/nginx&distro=openSUSE%20Tumbleweedpkg:rpm/suse/GeoIP&distro=SUSE%20Lifecycle%20Management%20Server%201.3pkg:rpm/suse/GeoIP&distro=SUSE%20Studio%20Onsite%201.3pkg:rpm/suse/GeoIP&distro=SUSE%20WebYast%201.3pkg:rpm/suse/nginx-1.0&distro=SUSE%20Lifecycle%20Management%20Server%201.3pkg:rpm/suse/nginx-1.0&distro=SUSE%20Studio%20Onsite%201.3pkg:rpm/suse/nginx-1.0&distro=SUSE%20WebYast%201.3
< 1.11.4-2.5+ 6 more
- (no CPE)range: < 1.11.4-2.5
- (no CPE)range: < 1.4.7-2.10.1
- (no CPE)range: < 1.4.7-2.10.1
- (no CPE)range: < 1.4.7-2.10.1
- (no CPE)range: < 1.0.15-0.29.2
- (no CPE)range: < 1.0.15-0.29.2
- (no CPE)range: < 1.0.15-0.29.2
Patches
Vulnerability mechanics
References
11- bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
- lists.opensuse.org/opensuse-updates/2016-02/msg00042.htmlnvdMailing ListThird Party Advisory
- mailman.nginx.org/pipermail/nginx/2016-January/049700.htmlnvdVendor Advisory
- seclists.org/fulldisclosure/2021/Sep/36nvdMailing ListThird Party Advisory
- www.debian.org/security/2016/dsa-3473nvdThird Party Advisory
- www.securitytracker.com/id/1034869nvdThird Party AdvisoryVDB Entry
- www.ubuntu.com/usn/USN-2892-1nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2016:1425nvdThird Party Advisory
- bto.bluecoat.com/security-advisory/sa115nvdThird Party Advisory
- security.gentoo.org/glsa/201606-06nvdThird Party Advisory
- support.apple.com/kb/HT212818nvdThird Party Advisory
News mentions
0No linked articles in our index yet.