CVE-2016-0742

The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (invalid pointer dereference and worker process…

published February 15, 2016

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.7th percentile for exploit probability.

CVSS
—
EPSS
82%
Percentile
99.7
In the wild
Unconfirmed
What it is

The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (invalid pointer dereference and worker process crash) via a crafted UDP DNS response.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.82377 · 99.7th percentile
Published
2016-02-15T19:00Z
EPSS history
Timeline
  • 15 FEB 19:00Z
    The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (invalid pointer dereference and worker process…
    cvelistv5