CVE-2016-1000105
Security update for nginx-1.0
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
What each source reports
CVE List No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
- Record
CVE-2016-1000105- Updated
- 2026-11-02
EUVDEUVD-2016-1050 No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
- Record
EUVD-2016-1050- Updated
- 2026-11-03
NVD No score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
- Record
CVE-2016-1000105- Updated
- 2026-11-02
OSVSUSE-SU-2017:0190-1 No score
Security update for nginx-1.0
This update for nginx-1.0 fixes the following issues:
This security issues fixed:
- CVE-2016-4450: NULL pointer dereference while writing client request body (bsc#982505).
- CVE-2016-1000105: Setting HTTP_PROXY environment variable via Proxy header (httpoxy) (bnc#988491).
- Record
SUSE-SU-2017:0190-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-1000105 No score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
- Record
UBUNTU-CVE-2016-1000105- Updated
- 2026-11-05
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nginx-1.0SUSE:Lifecycle Management Server 1.3 From an advisory covering 2 CVEs |
before 1.0.15-0.34.1 | 1.0.15-0.34.1 |
nginx-1.0SUSE:Studio Onsite 1.3 From an advisory covering 2 CVEs |
before 1.0.15-0.34.1 | 1.0.15-0.34.1 |
nginx-1.0SUSE:WebYast 1.3 From an advisory covering 2 CVEs |
before 1.0.15-0.34.1 | 1.0.15-0.34.1 |
nginxUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.4.1-3ubuntu11.4.3-2ubuntu11.4.4-1ubuntu11.4.4-2ubuntu11.4.4-4ubuntu1 Show 20 moreShow less1.4.5-1ubuntu11.4.6-1ubuntu21.4.6-1ubuntu31.4.6-1ubuntu3.11.4.6-1ubuntu3.21.4.6-1ubuntu3.31.4.6-1ubuntu3.41.4.6-1ubuntu3.51.4.6-1ubuntu3.61.4.6-1ubuntu3.71.4.6-1ubuntu3.81.4.6-1ubuntu3.91.4.6-1ubuntu3.9+esm11.4.6-1ubuntu3.9+esm21.4.6-1ubuntu3.9+esm31.4.6-1ubuntu3.9+esm41.4.6-1ubuntu3.9+esm51.4.6-1ubuntu3.9+esm61.4.6-1ubuntu3.9+esm81.4.6-1ubuntu3.9+esm9 |
None known |
nginxUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.9.3-1ubuntu11.9.6-2ubuntu11.9.6-2ubuntu21.9.9-0ubuntu11.9.9-1ubuntu1 Show 26 moreShow less1.9.10-0ubuntu11.9.10-1ubuntu11.9.11-0ubuntu11.9.11-0ubuntu21.9.12-0ubuntu11.9.13-0ubuntu11.9.14-0ubuntu11.9.15-0ubuntu11.10.0-0ubuntu0.16.04.11.10.0-0ubuntu0.16.04.21.10.0-0ubuntu0.16.04.31.10.0-0ubuntu0.16.04.41.10.3-0ubuntu0.16.04.11.10.3-0ubuntu0.16.04.21.10.3-0ubuntu0.16.04.31.10.3-0ubuntu0.16.04.41.10.3-0ubuntu0.16.04.51.10.3-0ubuntu0.16.04.5+esm11.10.3-0ubuntu0.16.04.5+esm21.10.3-0ubuntu0.16.04.5+esm31.10.3-0ubuntu0.16.04.5+esm41.10.3-0ubuntu0.16.04.5+esm51.10.3-0ubuntu0.16.04.5+esm61.10.3-0ubuntu0.16.04.5+esm71.10.3-0ubuntu0.16.04.5+esm91.10.3-0ubuntu0.16.04.5+esm10 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, facts | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-1000105 has been rejected by its source and should not be treated as a live vulnerability, published January 17, 2017.
References
suse.com/support/update/announcement/2017/suse-su-20170190-1
bugzilla.suse.com/982505
ubuntu.com/security/CVE-2016-1000105
nginx.com/blog/mitigating-the-httpoxy-vulnerability-with-nginx
cve.org/CVERecord?id=CVE-2016-1000105