CVE-2011-4315
Fixed in a distro release EPSS 6%
Heap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a long response.
Products: f5 nginx, fedoraproject fedora, suse studio, suse studio_onsite, suse webyast
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | nginx | 1.1.8-1 |
| Debian 13 | nginx | 1.1.8-1 |
| Debian 14 | nginx | 1.1.8-1 |
| openSUSE Tumbleweed | nginx | 1.11.4-2.5 |