参照： Official suse advisory, NVD, CVE.org · CVE 詳細
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2016-0747 severity low: SUSE including 19 source package names (GeoIP-1.4.7-2.10.1, libGeoIP1-1.4.7-2.10.1, …), 27 product×package rows across 15 product lines (SUSE Lifecycle Management Server 1.3, SUSE Linux Enterprise High Performance Computing 15-LTSS, … (15 product lines)): Fixed 23, Known Not Affected 4.
The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME resolution, which allows remote attackers to cause a denial of service (worker process resource consumption) via vectors related to arbitrary name resolution.