U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2016-0746

Change History

Modified Analysis by NIST 11/16/2020 3:13:50 PM

Action Type Old Value New Value
Added CVSS V3.1

								
							
							
						
NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Removed CVSS V3
NIST AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

								
						
Added CWE

								
							
							
						
NIST CWE-416
Removed CWE
NIST NVD-CWE-Other

								
						
Changed CPE Configuration
OR
     *cpe:2.3:a:nginx:nginx:*:*:*:*:*:*:*:* versions from (including) 0.6.18 up to (including) 1.8.0
     *cpe:2.3:a:nginx:nginx:1.9.0:*:*:*:*:*:*:*
     *cpe:2.3:a:nginx:nginx:1.9.1:*:*:*:*:*:*:*
     *cpe:2.3:a:nginx:nginx:1.9.2:*:*:*:*:*:*:*
     *cpe:2.3:a:nginx:nginx:1.9.3:*:*:*:*:*:*:*
     *cpe:2.3:a:nginx:nginx:1.9.4:*:*:*:*:*:*:*
     *cpe:2.3:a:nginx:nginx:1.9.5:*:*:*:*:*:*:*
     *cpe:2.3:a:nginx:nginx:1.9.6:*:*:*:*:*:*:*
     *cpe:2.3:a:nginx:nginx:1.9.7:*:*:*:*:*:*:*
     *cpe:2.3:a:nginx:nginx:1.9.8:*:*:*:*:*:*:*
     *cpe:2.3:a:nginx:nginx:1.9.9:*:*:*:*:*:*:*
OR
     *cpe:2.3:a:nginx:nginx:*:*:*:*:*:*:*:* versions from (including) 0.6.18 up to (including) 1.8.0
     *cpe:2.3:a:nginx:nginx:*:*:*:*:*:*:*:* versions from (including) 1.9.0 up to (excluding) 1.9.10
Added CPE Configuration

								
							
							
						
OR
     *cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
OR
     *cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
     *cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
OR
     *cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
Removed CPE Configuration
OR
     *cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
     *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
     *cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*

								
						
Changed Reference Type
http://lists.opensuse.org/opensuse-updates/2016-02/msg00042.html Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2016-02/msg00042.html Mailing List, Third Party Advisory
Changed Reference Type
http://www.ubuntu.com/usn/USN-2892-1 Broken Link
http://www.ubuntu.com/usn/USN-2892-1 Third Party Advisory
Changed Reference Type
https://bugzilla.redhat.com/show_bug.cgi?id=1302588 Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1302588 Issue Tracking, Patch, Third Party Advisory
Removed Evaluator Description
<a href="http://cwe.mitre.org/data/definitions/416.html" rel="nofollow">CWE-416: Use After Free</a>