Lucene search
Veracode Vulnerability DatabaseVERACODE:17029HistoryMay 02, 2019 - 5:35 a.m.
Denial Of Service (DoS)
2019-05-0205:35:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
EPSS
0.011
Percentile
84.2%
nginx is vulnerable to denial of service (DoS). The vulnerability exists as nginx does not enforce sane limits on the value of CNAME.
References
lists.opensuse.org/opensuse-updates/2016-02/msg00042.html
mailman.nginx.org/pipermail/nginx/2016-January/049700.html
seclists.org/fulldisclosure/2021/Sep/36
www.debian.org/security/2016/dsa-3473
www.securitytracker.com/id/1034869
www.ubuntu.com/usn/USN-2892-1
access.redhat.com/errata/RHSA-2016:1425
access.redhat.com/security/updates/classification/#moderate
bto.bluecoat.com/security-advisory/sa115
bugzilla.redhat.com/show_bug.cgi?id=1302589
security.gentoo.org/glsa/201606-06
support.apple.com/kb/HT212818
Related
debiancve
debiancve
CVE-2016-0747
2016-02-15 19:59:02
prion
prion
Authentication flaw
2016-02-15 19:59:00
cvelist
cvelist
CVE-2016-0747
2016-02-15 19:00:00
nginx
nginx
Insufficient limits of CNAME resolution in resolver
2016-02-15 19:59:02
cve
cve
CVE-2016-0747
2016-02-15 19:59:02
ubuntucve
ubuntucve
CVE-2016-0747
2016-01-26 00:00:00
nvd
nvd
CVE-2016-0747
2016-02-15 19:59:02
openvas
openvas
Ubuntu: Security Advisory (USN-2892-1)
2016-02-10 00:00:00
Debian Security Advisory DSA 3473-1 (nginx - security update)
2016-02-11 00:00:00
Debian: Security Advisory (DSA-3473-1)
2016-02-10 00:00:00
nessus
nessus
openSUSE Security Update : nginx (openSUSE-2016-161)
2016-02-08 00:00:00
FreeBSD : nginx -- multiple vulnerabilities (c1c18ee1-c711-11e5-96d6-14dae9d210b8)
2016-02-01 00:00:00
Debian DSA-3473-1 : nginx - security update
2016-02-12 00:00:00
archlinux
archlinux
nginx: denial of service
2016-01-27 00:00:00
symantec
symantec
SA115 : Multiple nginx DNS resolver vulnerabilities
2016-03-11 08:00:00
debian
debian
[SECURITY] [DSA 3473-1] nginx security update
2016-02-11 18:54:19
[SECURITY] [DSA 3473-1] nginx security update
2016-02-11 18:54:19
freebsd
freebsd
nginx -- multiple vulnerabilities
2016-01-26 00:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: nginx-1.8.1-1.fc23
2016-01-30 18:27:06
[SECURITY] Fedora 22 Update: nginx-1.8.1-1.fc22
2016-02-05 21:53:02
f5
f5
ubuntu
ubuntu
nginx vulnerabilities
2016-02-09 00:00:00
mageia
mageia
Updated nginx packages fix security vulnerabilities
2016-02-17 22:06:01
amazon
amazon
Medium: nginx
2016-02-19 15:50:00
altlinux
altlinux
Security fix for the ALT Linux 9 package nginx version 1.8.1-alt1
2016-02-01 00:00:00
ibm
ibm
redhat
redhat
(RHSA-2016:1425) Moderate: rh-nginx18-nginx security update
2016-07-14 04:53:33
gentoo
gentoo
nginx: Multiple vulnerabilities
2016-06-17 00:00:00
apple
apple
About the security content of Xcode 13
2021-09-20 00:00:00