CVE

Id
52227  
CVE No.
CVE-2011-4315  
Status
Candidate  
Description
Heap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a long response.  
Phase
Assigned (20111104)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
558042 52227 CVE-2011-4315 MLIST:[oss-security] 20111117 CVE Request: nginx resolver heap overflow  View
558043 52227 CVE-2011-4315 URL:http://openwall.com/lists/oss-security/2011/11/17/8  View
558044 52227 CVE-2011-4315 MLIST:[oss-security] 20111117 Re: CVE Request: nginx resolver heap overflow  View
558045 52227 CVE-2011-4315 URL:http://openwall.com/lists/oss-security/2011/11/17/10  View
558046 52227 CVE-2011-4315 CONFIRM:http://trac.nginx.org/nginx/changeset/4268/nginx  View
558047 52227 CVE-2011-4315 CONFIRM:http://www.nginx.org/en/CHANGES-1.0  View
558048 52227 CVE-2011-4315 FEDORA:FEDORA-2011-16075  View
558049 52227 CVE-2011-4315 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-December/070569.html  View
558050 52227 CVE-2011-4315 GENTOO:GLSA-201203-22  View
558051 52227 CVE-2011-4315 URL:http://security.gentoo.org/glsa/glsa-201203-22.xml  View
558052 52227 CVE-2011-4315 SUSE:SUSE-SU-2011:1300  View
558053 52227 CVE-2011-4315 URL:http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00005.html  View
558054 52227 CVE-2011-4315 BID:50710  View
558055 52227 CVE-2011-4315 URL:http://www.securityfocus.com/bid/50710  View
558056 52227 CVE-2011-4315 SECUNIA:47097  View
558057 52227 CVE-2011-4315 URL:http://secunia.com/advisories/47097  View
558058 52227 CVE-2011-4315 SECUNIA:48577  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
25807 JVNDB-2012-001514 ejabberd の mod_pubsub モジュール (mod_pubsub.erl) におけるサービス運用妨害 (無限ループ) の脆弱性 ejabberd の mod_pubsub モジュール (mod_pubsub.erl) には、サービス運用妨害 (無限ループ) 状態となる脆弱性が存在します。 CVE-2011-4320 52227 4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001514.html  View