Lucene search

[email protected]CVE-2011-4315

HistoryDec 08, 2011 - 8:55 p.m.

CVE-2011-4315

2011-12-0820:55:01

CWE-787

[email protected]

web.nvd.nist.gov

cve-2011-4315

nvd

nginx

buffer overflow

denial of service

remote resolvers

security vulnerability

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.4%

JSON

Heap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a long response.

Affected configurations

NVD

Node

f5nginxRange0.6.18–1.0.10

f5nginxRange1.1.0–1.1.7

Node

fedoraprojectfedoraMatch16

Node

susestudioMatch1.2standard

susestudio_onsiteMatch1.2

susewebyastMatch1.2

CPENameOperatorVersion
f5:nginxf5 nginxlt1.0.10
f5:nginxf5 nginxle1.1.7

CPE	Name	Operator	Version
f5:nginx	f5 nginx	lt	1.0.10
f5:nginx	f5 nginx	le	1.1.7

References

lists.fedoraproject.org/pipermail/package-announce/2011-December/070569.html

lists.opensuse.org/opensuse-security-announce/2011-12/msg00005.html

openwall.com/lists/oss-security/2011/11/17/10

openwall.com/lists/oss-security/2011/11/17/8

secunia.com/advisories/47097

secunia.com/advisories/48577

security.gentoo.org/glsa/glsa-201203-22.xml

trac.nginx.org/nginx/changeset/4268/nginx

www.nginx.org/en/CHANGES-1.0

www.securityfocus.com/bid/50710

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.4%

JSON

Related for CVE-2011-4315

nessus7 openvas10 ubuntucve1 seebug1 suse2 amazon1 fedora2 prion1 nvd1 debiancve1 cvelist1 nginx1 gentoo1