Skip to content
OpenAdvisories
Unscored RHSA-2016:1425 4 CVEs

Red Hat Security Advisory: rh-nginx18-nginx security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-nginx18-nginx 1:1.8.1-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-nginx18-nginx-debuginfo 1:1.8.1-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-nginx18-nginx 1:1.8.1-1.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-nginx18-nginx-debuginfo 1:1.8.1-1.el7

Vulnerabilities 4

  • Unscored —
    CVE-2016-0742 EPSS 82%

    The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (invali…

    nginx nginx Debian Ubuntu
  • Unscored —
    CVE-2016-0746

    Use-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9.10 allows remote attack…

    nginx nginx Debian Ubuntu
  • Unscored —
    CVE-2016-0747

    The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME resolution, which allows remot…

    nginx nginx Debian Ubuntu
  • Unscored —
    CVE-2016-4450 EPSS 16%

    os/unix/ngx_files.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to cause a denial of servic…

    nginx nginx Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1302587
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1302588
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1302589
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1341462
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1425.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-0742
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-0742
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-0742
  • article
    http://mailman.nginx.org/pipermail/nginx-announce/2016/000169.html
  • report
    https://access.redhat.com/security/cve/CVE-2016-0746
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-0746
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-0746
  • report
    https://access.redhat.com/security/cve/CVE-2016-0747
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-0747
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-0747
  • report
    https://access.redhat.com/security/cve/CVE-2016-4450
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-4450
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-4450
  • article
    http://mailman.nginx.org/pipermail/nginx-announce/2016/000179.html