SUSE-SU-2016:1232-1
Not scored
Security update for nginx-1.0
This update for nginx-1.0 fixes the following issues: Security fixes: - CVE-2016-0742: Invalid pointer dereference during DNS server response processing - CVE-2016-0747: Resource exhaustion through unlimited CNAME resolution - CVE-2016-0746: Use-after-free condition during CNAME response processing
Exploit probability
Not scored
Published
May 4, 2016
Required by
Not available
Last source change
February 4, 2026
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
SUSE-SU-2016:1232-1
View original source
This update for nginx-1.0 fixes the following issues: Security fixes: - CVE-2016-0742: Invalid pointer dereference during DNS server response processing - CVE-2016-0747: Resource exhaustion through unlimited CNAME resolution - CVE-2016-0746: Use-after-free condition during CNAME response processing
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/963775
- https://bugzilla.suse.com/963778
- https://bugzilla.suse.com/963781
- https://www.suse.com/security/cve/CVE-2016-0742
- https://www.suse.com/security/cve/CVE-2016-0746
- https://www.suse.com/security/cve/CVE-2016-0747
- https://www.suse.com/support/update/announcement/2016/suse-su-20161232-1/