Skip to content
OpenAdvisories
Unscored DSA-3473-1 3 CVEs

nginx - security update

Published Feb 11, 2016 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 7 nginx 1.2.1-2.2+wheezy4
Debian · 8 nginx 1.6.2-5+deb8u1

Vulnerabilities 3

  • Unscored —
    CVE-2016-0742 EPSS 82%

    The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (invali…

  • Unscored —

    Use-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9.10 allows remote attack…

  • Unscored —

    The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME resolution, which allows remot…