CVE-2016-0742

CVSS v3.1 7.5 (High)

CVSS v2.0 5 (Medium)

EPSS 87.14 % (99^th)

Affected Products 6

Advisories 9

The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (invalid pointer dereference and worker process crash) via a crafted UDP DNS response.

Weaknesses

CWE-476: NULL Pointer Dereference

CVE Status: PUBLISHED
CNA: Red Hat, Inc.
Published Date: 2016-02-15 19:59:00
(8 years ago)
Updated Date: 2021-12-15 17:13:25
(2 years ago)

Affected Products

Configuration #1

		CPE23	From	Up To
	F5 Nginx from 0.6.18 version and prior 1.8.1 version	cpe:2.3:a:f5:nginx	>= 0.6.18	< 1.8.1
	F5 Nginx from 1.9.0 version and prior 1.9.10 version	cpe:2.3:a:f5:nginx	>= 1.9.0	< 1.9.10

Configuration #2

		CPE23	From	Up To
	Canonical Ubuntu Linux 14.04	cpe:2.3:o:canonical:ubuntu_linux:14.04:::*:esm
	Canonical Ubuntu Linux 15.10	cpe:2.3:o:canonical:ubuntu_linux:15.10

Configuration #3

		CPE23	From	Up To
	Debian Linux 7.0	cpe:2.3:o:debian:debian_linux:7.0
	Debian Linux 8.0	cpe:2.3:o:debian:debian_linux:8.0
	Debian Linux 9.0	cpe:2.3:o:debian:debian_linux:9.0

Configuration #4

		CPE23	From	Up To
	Opensuse Leap 42.1	cpe:2.3:o:opensuse:leap:42.1

Configuration #5

		CPE23	From	Up To
	Apple Xcode prior 13.0 version	cpe:2.3:a:apple:xcode		< 13.0

Configuration #6

		CPE23	From	Up To
	Redhat Software Collections 1.0	cpe:2.3:a:redhat:software_collections:1.0

Weaknesses

Affected Products

Apple

Canonical

Debian

F5

Opensuse

Redhat