{"id":"CVE-2016-1000105","aliases":["EUVD-2016-1050","SUSE-SU-2017:0190-1","UBUNTU-CVE-2016-1000105"],"status":"rejected","title":"Security update for nginx-1.0","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2017-01-17T17:04:53Z","modified":"2026-11-05T19:01:03Z","affected":[{"source":"osv","ecosystem":"SUSE:Lifecycle Management Server 1.3","package":"nginx-1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.15-0.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Studio Onsite 1.3","package":"nginx-1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.15-0.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:WebYast 1.3","package":"nginx-1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.15-0.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.1-3ubuntu1","1.4.3-2ubuntu1","1.4.4-1ubuntu1","1.4.4-2ubuntu1","1.4.4-4ubuntu1","1.4.5-1ubuntu1","1.4.6-1ubuntu2","1.4.6-1ubuntu3","1.4.6-1ubuntu3.1","1.4.6-1ubuntu3.2","1.4.6-1ubuntu3.3","1.4.6-1ubuntu3.4","1.4.6-1ubuntu3.5","1.4.6-1ubuntu3.6","1.4.6-1ubuntu3.7","1.4.6-1ubuntu3.8","1.4.6-1ubuntu3.9","1.4.6-1ubuntu3.9+esm1","1.4.6-1ubuntu3.9+esm2","1.4.6-1ubuntu3.9+esm3","1.4.6-1ubuntu3.9+esm4","1.4.6-1ubuntu3.9+esm5","1.4.6-1ubuntu3.9+esm6","1.4.6-1ubuntu3.9+esm8","1.4.6-1ubuntu3.9+esm9"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.3-1ubuntu1","1.9.6-2ubuntu1","1.9.6-2ubuntu2","1.9.9-0ubuntu1","1.9.9-1ubuntu1","1.9.10-0ubuntu1","1.9.10-1ubuntu1","1.9.11-0ubuntu1","1.9.11-0ubuntu2","1.9.12-0ubuntu1","1.9.13-0ubuntu1","1.9.14-0ubuntu1","1.9.15-0ubuntu1","1.10.0-0ubuntu0.16.04.1","1.10.0-0ubuntu0.16.04.2","1.10.0-0ubuntu0.16.04.3","1.10.0-0ubuntu0.16.04.4","1.10.3-0ubuntu0.16.04.1","1.10.3-0ubuntu0.16.04.2","1.10.3-0ubuntu0.16.04.3","1.10.3-0ubuntu0.16.04.4","1.10.3-0ubuntu0.16.04.5","1.10.3-0ubuntu0.16.04.5+esm1","1.10.3-0ubuntu0.16.04.5+esm2","1.10.3-0ubuntu0.16.04.5+esm3","1.10.3-0ubuntu0.16.04.5+esm4","1.10.3-0ubuntu0.16.04.5+esm5","1.10.3-0ubuntu0.16.04.5+esm6","1.10.3-0ubuntu0.16.04.5+esm7","1.10.3-0ubuntu0.16.04.5+esm9","1.10.3-0ubuntu0.16.04.5+esm10"]}],"references":[{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170190-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/982505","tags":["report"]},{"url":"https://bugzilla.suse.com/988491","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1000105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4450","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-1000105","tags":["report"]},{"url":"https://www.nginx.com/blog/mitigating-the-httpoxy-vulnerability-with-nginx/","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1000105","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-1000105","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none","status":"rejected","published":"2020-01-31T21:38:27Z","modified":"2020-01-31T21:38:27Z","updated_at":"2026-11-02T14:33:36.802481Z"}],"euvd":[{"id":"EUVD-2016-1050","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none","status":"published","published":"2020-01-31T21:38:27Z","modified":"2020-01-31T21:38:27Z","updated_at":"2026-11-03T03:51:24.639532Z"}],"nvd":[{"id":"CVE-2016-1000105","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none","status":"rejected","published":"2020-01-31T22:15:11.37Z","modified":"2023-11-07T02:29:26.13Z","updated_at":"2026-11-02T14:03:40.524348Z"}],"osv":[{"id":"SUSE-SU-2017:0190-1","title":"Security update for nginx-1.0","description":"This update for nginx-1.0 fixes the following issues:\n\nThis security issues fixed:\n- CVE-2016-4450: NULL pointer dereference while writing client request body (bsc#982505).\n- CVE-2016-1000105: Setting HTTP_PROXY environment variable via Proxy header (httpoxy) (bnc#988491).\n","status":"published","published":"2017-01-17T17:04:53Z","modified":"2026-02-04T04:33:01.741931Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"UBUNTU-CVE-2016-1000105","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none","status":"published","published":"2020-01-31T22:15:00Z","modified":"2026-11-05T19:01:03.438185661Z","updated_at":"2026-11-05T19:27:36.688147Z"}]}}