CVE-2011-4315 Heap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service (daemon crash) or possibly have unspecif...
MediumCVSS 6.8
EPSS 6.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a long response.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/nginx(Debian:12) | < 1.1.8-1 | 1.1.8-1 |
| debian/nginx(Debian:13) | < 1.1.8-1 | 1.1.8-1 |
| debian/nginx(Debian:14) | < 1.1.8-1 | 1.1.8-1 |
| f5 nginx | >= 0.6.18, < 1.0.10 | 1.0.10 |
| f5 nginx | >= 1.1.0, <= 1.1.7 | No fix listed |
| fedoraproject fedora | = 16 | No fix listed |
| SUSE studio | = 1.2 | No fix listed |
| SUSE studio onsite | = 1.2 | No fix listed |
| SUSE webyast | = 1.2 | No fix listed |
References
- Debian Security Tracker CVE-2011-4315 vendor-advisory
- FEDORA-2011-16075 third-party-advisory vendor-advisory
- SUSE-SU-2011:1300 mailing-list third-party-advisory vendor-advisory
- [oss-security] 20111117 Re: CVE Request: nginx resolver heap overflow mailing-list patch third-party-advisory
- [oss-security] 20111117 CVE Request: nginx resolver heap overflow mailing-list patch third-party-advisory
- 47097 third-party-advisory
- 48577 third-party-advisory
- GLSA-201203-22 third-party-advisory vendor-advisory
- trac.nginx.org issue-tracking patch vendor-advisory
- www.nginx.org release-notes vendor-advisory
- 50710 third-party-advisory vdb-entry