Search for vulnerabilities
Vulnerability details: VCID-cjeh-2x36-ffc5
Vulnerability ID VCID-cjeh-2x36-ffc5
Aliases CVE-2016-0747
Summary Insufficient limits of CNAME resolution in resolver
Status Published
Exploitability 0.5
Weighted Severity 3.5
Risk 1.8
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-400 Uncontrolled Resource Consumption
System Score Found at
epss 0.16201 https://api.first.org/data/v1/epss?cve=CVE-2016-0747
epss 0.16201 https://api.first.org/data/v1/epss?cve=CVE-2016-0747
epss 0.16201 https://api.first.org/data/v1/epss?cve=CVE-2016-0747
epss 0.21441 https://api.first.org/data/v1/epss?cve=CVE-2016-0747
epss 0.21441 https://api.first.org/data/v1/epss?cve=CVE-2016-0747
epss 0.21441 https://api.first.org/data/v1/epss?cve=CVE-2016-0747
epss 0.21441 https://api.first.org/data/v1/epss?cve=CVE-2016-0747
epss 0.21441 https://api.first.org/data/v1/epss?cve=CVE-2016-0747
epss 0.21441 https://api.first.org/data/v1/epss?cve=CVE-2016-0747
epss 0.21441 https://api.first.org/data/v1/epss?cve=CVE-2016-0747
epss 0.21441 https://api.first.org/data/v1/epss?cve=CVE-2016-0747
epss 0.21441 https://api.first.org/data/v1/epss?cve=CVE-2016-0747
epss 0.21441 https://api.first.org/data/v1/epss?cve=CVE-2016-0747
epss 0.21441 https://api.first.org/data/v1/epss?cve=CVE-2016-0747
epss 0.28318 https://api.first.org/data/v1/epss?cve=CVE-2016-0747
epss 0.28318 https://api.first.org/data/v1/epss?cve=CVE-2016-0747
epss 0.28318 https://api.first.org/data/v1/epss?cve=CVE-2016-0747
epss 0.28318 https://api.first.org/data/v1/epss?cve=CVE-2016-0747
epss 0.28318 https://api.first.org/data/v1/epss?cve=CVE-2016-0747
epss 0.28318 https://api.first.org/data/v1/epss?cve=CVE-2016-0747
epss 0.28318 https://api.first.org/data/v1/epss?cve=CVE-2016-0747
cvssv2 2.6 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
generic_textual medium https://mailman.nginx.org/pipermail/nginx-announce/2016/000169.html
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0747.json
https://api.first.org/data/v1/epss?cve=CVE-2016-0747
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0742
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0746
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0747
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://mailman.nginx.org/pipermail/nginx-announce/2016/000169.html
1302589 https://bugzilla.redhat.com/show_bug.cgi?id=1302589
812806 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=812806
CVE-2016-0747 https://nvd.nist.gov/vuln/detail/CVE-2016-0747
RHSA-2016:1425 https://access.redhat.com/errata/RHSA-2016:1425
USN-2892-1 https://usn.ubuntu.com/2892-1/
No exploits are available.
Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.94586
EPSS Score 0.16201
Published At Aug. 1, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:03:11.997581+00:00 Nginx Importer Import https://nginx.org/en/security_advisories.html 37.0.0