Sign-up

ID

VAR-201606-0476


CVE

CVE-2016-4450


TITLE

nginx of os/unix/ngx_files.c Service disruption in (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2016-003032

DESCRIPTION

os/unix/ngx_files.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a crafted request, involving writing a client request body to a temporary file. Supplementary information : CWE Vulnerability type by CWE-476: NULL Pointer Dereference (NULL Pointer dereference ) Has been identified. nginx is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application, resulting in denial-of-service conditions. nginx 1.3.9 through 1.11.0 are vulnerable. A security vulnerability exists in the os/unix/ngx_files.c file of nginx versions prior to 1.10.1 and versions 1.11.x prior to 1.11.1. ========================================================================== Ubuntu Security Notice USN-2991-1 June 02, 2016 nginx vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 LTS - Ubuntu 15.10 - Ubuntu 14.04 LTS Summary: nginx could be made to crash if it received specially crafted network traffic. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS: nginx-core 1.10.0-0ubuntu0.16.04.2 nginx-extras 1.10.0-0ubuntu0.16.04.2 nginx-full 1.10.0-0ubuntu0.16.04.2 nginx-light 1.10.0-0ubuntu0.16.04.2 Ubuntu 15.10: nginx-core 1.9.3-1ubuntu1.2 nginx-extras 1.9.3-1ubuntu1.2 nginx-full 1.9.3-1ubuntu1.2 nginx-light 1.9.3-1ubuntu1.2 Ubuntu 14.04 LTS: nginx-core 1.4.6-1ubuntu3.5 nginx-extras 1.4.6-1ubuntu3.5 nginx-full 1.4.6-1ubuntu3.5 nginx-light 1.4.6-1ubuntu3.5 In general, a standard system update will make all the necessary changes. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Moderate: rh-nginx18-nginx security update Advisory ID: RHSA-2016:1425-01 Product: Red Hat Software Collections Advisory URL: https://access.redhat.com/errata/RHSA-2016:1425 Issue date: 2016-07-14 CVE Names: CVE-2016-0742 CVE-2016-0746 CVE-2016-0747 CVE-2016-4450 ===================================================================== 1. Summary: An update for rh-nginx18-nginx is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) - x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) - x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6) - x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) - x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1) - x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2) - x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) - x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) - x86_64 3. Description: Nginx is a web and proxy server with a focus on high concurrency, performance, and low memory usage. The following packages have been upgraded to a newer upstream version: rh-nginx18-nginx (1.8.1). (CVE-2016-4450) * It was discovered that nginx could perform an out of bound read and dereference an invalid pointer when resolving CNAME DNS records. An attacker able to manipulate DNS responses received by nginx could use this flaw to cause a worker process to crash if nginx enabled the resolver in its configuration. (CVE-2016-0742) * A use-after-free flaw was found in the way nginx resolved certain CNAME DNS records. An attacker able to manipulate DNS responses received by nginx could use this flaw to cause a worker process to crash or, possibly, execute arbitrary code if nginx enabled the resolver in its configuration. (CVE-2016-0746) * It was discovered that nginx did not limit recursion when resolving CNAME DNS records. An attacker able to manipulate DNS responses received by nginx could use this flaw to cause a worker process to use an excessive amount of resources if nginx enabled the resolver in its configuration. (CVE-2016-0747) 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The rh-nginx18-nginx service must be restarted for this update to take effect. 5. Package List: Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6): Source: rh-nginx18-nginx-1.8.1-1.el6.src.rpm x86_64: rh-nginx18-nginx-1.8.1-1.el6.x86_64.rpm rh-nginx18-nginx-debuginfo-1.8.1-1.el6.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6): Source: rh-nginx18-nginx-1.8.1-1.el6.src.rpm x86_64: rh-nginx18-nginx-1.8.1-1.el6.x86_64.rpm rh-nginx18-nginx-debuginfo-1.8.1-1.el6.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7): Source: rh-nginx18-nginx-1.8.1-1.el6.src.rpm x86_64: rh-nginx18-nginx-1.8.1-1.el6.x86_64.rpm rh-nginx18-nginx-debuginfo-1.8.1-1.el6.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6): Source: rh-nginx18-nginx-1.8.1-1.el6.src.rpm x86_64: rh-nginx18-nginx-1.8.1-1.el6.x86_64.rpm rh-nginx18-nginx-debuginfo-1.8.1-1.el6.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7): Source: rh-nginx18-nginx-1.8.1-1.el7.src.rpm x86_64: rh-nginx18-nginx-1.8.1-1.el7.x86_64.rpm rh-nginx18-nginx-debuginfo-1.8.1-1.el7.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1): Source: rh-nginx18-nginx-1.8.1-1.el7.src.rpm x86_64: rh-nginx18-nginx-1.8.1-1.el7.x86_64.rpm rh-nginx18-nginx-debuginfo-1.8.1-1.el7.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2): Source: rh-nginx18-nginx-1.8.1-1.el7.src.rpm x86_64: rh-nginx18-nginx-1.8.1-1.el7.x86_64.rpm rh-nginx18-nginx-debuginfo-1.8.1-1.el7.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7): Source: rh-nginx18-nginx-1.8.1-1.el7.src.rpm x86_64: rh-nginx18-nginx-1.8.1-1.el7.x86_64.rpm rh-nginx18-nginx-debuginfo-1.8.1-1.el7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2016-0742 https://access.redhat.com/security/cve/CVE-2016-0746 https://access.redhat.com/security/cve/CVE-2016-0747 https://access.redhat.com/security/cve/CVE-2016-4450 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2016 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFXhy2gXlSAg2UNWIIRAjOgAJ9QjuFMrvK50IeJq8Ky7VkefuMBUwCeM+Cp ZhbDRXs2sdXbnakZ6oJi/K8= =7RBd -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce . - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201606-06 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: nginx: Multiple vulnerabilities Date: June 17, 2016 Bugs: #560854, #573046, #584744 ID: 201606-06 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been found in nginx, the worst of which may allow a remote attacker to cause a Denial of Service. Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 www-servers/nginx < 1.10.1 >= 1.10.1 Description =========== Multiple vulnerabilities have been discovered in nginx. Please review the CVE identifiers referenced below for details. Workaround ========== There is no known workaround at this time. Resolution ========== All nginx users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/nginx-1.10.1" References ========== [ 1 ] CVE-2013-3587 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3587 [ 2 ] CVE-2016-0742 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0742 [ 3 ] CVE-2016-0746 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0746 [ 4 ] CVE-2016-0747 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0747 [ 5 ] CVE-2016-4450 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-4450 [ 6 ] CVE-2016-4450 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-4450 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201606-06 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2016 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5 . For the stable distribution (jessie), this problem has been fixed in version 1.6.2-5+deb8u2. For the unstable distribution (sid), this problem has been fixed in version 1.10.1-1. We recommend that you upgrade your nginx packages

Trust: 2.34

sources: NVD: CVE-2016-4450 // JVNDB: JVNDB-2016-003032 // BID: 90967 // VULHUB: VHN-93269 // PACKETSTORM: 137296 // PACKETSTORM: 137908 // PACKETSTORM: 137518 // PACKETSTORM: 137286

AFFECTED PRODUCTS

vendor:debianmodel:linuxscope:eqversion:8.0

Trust: 1.6

vendor:canonicalmodel:ubuntu linuxscope:eqversion:14.04

Trust: 1.0

vendor:f5model:nginxscope:eqversion:1.11.0

Trust: 1.0

vendor:canonicalmodel:ubuntu linuxscope:eqversion:15.10

Trust: 1.0

vendor:f5model:nginxscope:ltversion:1.10.1

Trust: 1.0

vendor:f5model:nginxscope:gteversion:1.3.9

Trust: 1.0

vendor:canonicalmodel:ubuntu linuxscope:eqversion:16.04

Trust: 1.0

vendor:igor sysoevmodel:nginxscope:eqversion:1.11.1

Trust: 0.8

vendor:canonicalmodel:ubuntuscope:eqversion:15.10

Trust: 0.8

vendor:canonicalmodel:ubuntuscope:eqversion:16.04 lts

Trust: 0.8

vendor:igor sysoevmodel:nginxscope:ltversion:of 1.11.x

Trust: 0.8

vendor:canonicalmodel:ubuntuscope:eqversion:14.04 lts

Trust: 0.8

vendor:debianmodel:gnu/linuxscope:eqversion:8.0

Trust: 0.8

vendor:nginxmodel:nginxscope:eqversion:1.11

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.10

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.9.10

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.9.9

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.8.1

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.3.16

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.3.15

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.3.14

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.3.11

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.6.1

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.6.0

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.5.9

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.5.8

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.5.7

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.5.6

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.5.5

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.5.4

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.5.3

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.5.2

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.5.12

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.5.11

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.5.10

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.5.1

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.5.0

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.4.3

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.4.2

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.4.1

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.4.0

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.3.9

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.3.13

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.3.12

Trust: 0.3

vendor:nginxmodel:nginxscope:eqversion:1.3.10

Trust: 0.3

vendor:ibmmodel:powerkvmscope:eqversion:3.1

Trust: 0.3

vendor:ibmmodel:powerkvmscope:eqversion:2.1

Trust: 0.3

vendor:asperasoftmodel:aspera sharesscope:eqversion:1.9.1

Trust: 0.3

vendor:asperasoftmodel:aspera sharesscope:eqversion:1.9

Trust: 0.3

vendor:asperasoftmodel:aspera sharesscope:eqversion:1.8.1

Trust: 0.3

vendor:asperasoftmodel:aspera sharesscope:eqversion:1.7.5

Trust: 0.3

vendor:asperasoftmodel:aspera sharesscope:eqversion:1.7.3

Trust: 0.3

vendor:asperasoftmodel:aspera sharesscope:eqversion:1.0.1

Trust: 0.3

vendor:asperasoftmodel:aspera sharesscope:eqversion:1.9.2

Trust: 0.3

vendor:nginxmodel:nginxscope:neversion:1.11.1

Trust: 0.3

vendor:nginxmodel:nginxscope:neversion:1.10.1

Trust: 0.3

vendor:asperasoftmodel:aspera sharesscope:neversion:1.9.6

Trust: 0.3

vendor:asperasoftmodel:aspera sharesscope:neversion:1.9.4

Trust: 0.3

sources: BID: 90967 // JVNDB: JVNDB-2016-003032 // CNNVD: CNNVD-201606-010 // NVD: CVE-2016-4450

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2016-4450
value: HIGH

Trust: 1.0

NVD: CVE-2016-4450
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201606-010
value: HIGH

Trust: 0.6

VULHUB: VHN-93269
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2016-4450
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-93269
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2016-4450
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 3.6
version: 3.1

Trust: 1.0

NVD: CVE-2016-4450
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULHUB: VHN-93269 // JVNDB: JVNDB-2016-003032 // CNNVD: CNNVD-201606-010 // NVD: CVE-2016-4450

PROBLEMTYPE DATA

problemtype:CWE-476

Trust: 1.1

problemtype:CWE-Other

Trust: 0.8

sources: VULHUB: VHN-93269 // JVNDB: JVNDB-2016-003032 // NVD: CVE-2016-4450

THREAT TYPE

remote

Trust: 0.9

sources: PACKETSTORM: 137296 // PACKETSTORM: 137908 // PACKETSTORM: 137518 // CNNVD: CNNVD-201606-010

TYPE

code problem

Trust: 0.6

sources: CNNVD: CNNVD-201606-010

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2016-003032

PATCH
title:DSA-3592url:http://www.debian.org/security/2016/dsa-3592
Trust: 0.8
title:USN-2991-1url:http://www.ubuntu.com/usn/USN-2991-1/
Trust: 0.8
title:CVE-2016-4450url:http://mailman.nginx.org/pipermail/nginx-announce/2016/000179.html
Trust: 0.8
title:nginx Remediation measures for denial of service vulnerabilitiesurl:http://123.124.177.30/web/xxk/bdxqById.tag?id=62036
Trust: 0.6
sources:
            
            
            JVNDB: JVNDB-2016-003032 // 
            
            
            
            CNNVD: CNNVD-201606-010

EXTERNAL IDS
db:NVDid:CVE-2016-4450
Trust: 3.2
db:BIDid:90967
Trust: 2.0
db:SECTRACKid:1036019
Trust: 1.7
db:JVNDBid:JVNDB-2016-003032
Trust: 0.8
db:CNNVDid:CNNVD-201606-010
Trust: 0.7
db:AUSCERTid:ESB-2020.1717
Trust: 0.6
db:PACKETSTORMid:137286
Trust: 0.2
db:PACKETSTORMid:137296
Trust: 0.2
db:VULHUBid:VHN-93269
Trust: 0.1
db:PACKETSTORMid:137908
Trust: 0.1
db:PACKETSTORMid:137518
Trust: 0.1
sources:
            
            
            VULHUB: VHN-93269 // 
            
            
            
            BID: 90967 // 
            
            
            
            JVNDB: JVNDB-2016-003032 // 
            
            
            
            PACKETSTORM: 137296 // 
            
            
            
            PACKETSTORM: 137908 // 
            
            
            
            PACKETSTORM: 137518 // 
            
            
            
            PACKETSTORM: 137286 // 
            
            
            
            CNNVD: CNNVD-201606-010 // 
            
            
            
            NVD: CVE-2016-4450

REFERENCES
url:http://mailman.nginx.org/pipermail/nginx-announce/2016/000179.html
Trust: 2.0
url:https://security.gentoo.org/glsa/201606-06
Trust: 1.8
url:https://access.redhat.com/errata/rhsa-2016:1425
Trust: 1.8
url:http://www.ubuntu.com/usn/usn-2991-1
Trust: 1.8
url:http://www.securityfocus.com/bid/90967
Trust: 1.7
url:http://www.debian.org/security/2016/dsa-3592
Trust: 1.7
url:http://www.securitytracker.com/id/1036019
Trust: 1.7
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-4450
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-4450
Trust: 0.8
url:https://www.auscert.org.au/bulletins/esb-2020.1717/
Trust: 0.6
url:https://nvd.nist.gov/vuln/detail/cve-2016-4450
Trust: 0.4
url:http://nginx.org/
Trust: 0.3
url:https://bugzilla.redhat.com/show_bug.cgi?id=1341462
Trust: 0.3
url:http://www-01.ibm.com/support/docview.wss?uid=isg3t1024237
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2016-0746
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2016-0742
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2016-0747
Trust: 0.2
url:https://launchpad.net/ubuntu/+source/nginx/1.4.6-1ubuntu3.5
Trust: 0.1
url:https://launchpad.net/ubuntu/+source/nginx/1.9.3-1ubuntu1.2
Trust: 0.1
url:https://launchpad.net/ubuntu/+source/nginx/1.10.0-0ubuntu0.16.04.2
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2016-0742
Trust: 0.1
url:https://www.redhat.com/mailman/listinfo/rhsa-announce
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2016-0747
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2016-0746
Trust: 0.1
url:https://bugzilla.redhat.com/):
Trust: 0.1
url:https://access.redhat.com/security/team/key/
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2016-4450
Trust: 0.1
url:https://access.redhat.com/articles/11258
Trust: 0.1
url:https://access.redhat.com/security/updates/classification/#moderate
Trust: 0.1
url:https://access.redhat.com/security/team/contact/
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-3587
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0746
Trust: 0.1
url:http://creativecommons.org/licenses/by-sa/2.5
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-4450
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0747
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0742
Trust: 0.1
url:https://security.gentoo.org/
Trust: 0.1
url:https://bugs.gentoo.org.
Trust: 0.1
url:https://www.debian.org/security/
Trust: 0.1
url:https://www.debian.org/security/faq
Trust: 0.1
sources:
            
            
            VULHUB: VHN-93269 // 
            
            
            
            BID: 90967 // 
            
            
            
            JVNDB: JVNDB-2016-003032 // 
            
            
            
            PACKETSTORM: 137296 // 
            
            
            
            PACKETSTORM: 137908 // 
            
            
            
            PACKETSTORM: 137518 // 
            
            
            
            PACKETSTORM: 137286 // 
            
            
            
            CNNVD: CNNVD-201606-010 // 
            
            
            
            NVD: CVE-2016-4450

CREDITS
The vendor reported this issue.
Trust: 0.3
sources:
            
            
            BID: 90967

SOURCES
db:VULHUBid:VHN-93269
db:BIDid:90967
db:JVNDBid:JVNDB-2016-003032
db:PACKETSTORMid:137296
db:PACKETSTORMid:137908
db:PACKETSTORMid:137518
db:PACKETSTORMid:137286
db:CNNVDid:CNNVD-201606-010
db:NVDid:CVE-2016-4450

LAST UPDATE DATE
2024-08-14T12:04:46.283000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-93269date:2021-11-10T00:00:00
db:BIDid:90967date:2016-10-26T00:19:00
db:JVNDBid:JVNDB-2016-003032date:2016-06-08T00:00:00
db:CNNVDid:CNNVD-201606-010date:2023-05-15T00:00:00
db:NVDid:CVE-2016-4450date:2021-11-10T16:00:48.823

SOURCES RELEASE DATE
db:VULHUBid:VHN-93269date:2016-06-07T00:00:00
db:BIDid:90967date:2016-05-31T00:00:00
db:JVNDBid:JVNDB-2016-003032date:2016-06-08T00:00:00
db:PACKETSTORMid:137296date:2016-06-02T16:24:00
db:PACKETSTORMid:137908date:2016-07-14T20:08:00
db:PACKETSTORMid:137518date:2016-06-17T23:50:23
db:PACKETSTORMid:137286date:2016-06-01T23:31:23
db:CNNVDid:CNNVD-201606-010date:2016-06-02T00:00:00
db:NVDid:CVE-2016-4450date:2016-06-07T14:06:14.200