nginx DNS Resolver Remote Heap Buffer Overflow Vulnerability

Bugtraq ID:	50710
Class:	Boundary Condition Error
CVE:	CVE-2011-4315
Remote:	Yes
Local:	No
Published:	Nov 17 2011 12:00AM
Updated:	Apr 13 2015 09:13PM
Credit:	Ben Hawkes
Vulnerable:	SuSE WebYaST 1.2 + S.u.S.E. Linux Personal 9.1 + S.u.S.E. Linux Personal 9.0 x86_64 + S.u.S.E. Linux Personal 9.0 + S.u.S.E. Linux Personal 8.2 + SuSE Linux 8.1 SuSE Studio Standard Edition 1.2 SuSE Studio Onsite 1.2 S.u.S.E. openSUSE 11.4 Igor Sysoev nginx 1.0.9 Igor Sysoev nginx 1.0.8 Igor Sysoev nginx 0.8.41 Igor Sysoev nginx 0.8.36 Igor Sysoev nginx 0.8.35 Igor Sysoev nginx 0.8.33 Igor Sysoev nginx 0.8.32 Igor Sysoev nginx 0.8.15 Igor Sysoev nginx 0.8.14 Igor Sysoev nginx 0.7.66 Igor Sysoev nginx 0.7.65 Igor Sysoev nginx 0.7.64 Igor Sysoev nginx 0.7.62 Igor Sysoev nginx 0.7.61 Igor Sysoev nginx 0.7 Igor Sysoev nginx 0.6.39 Igor Sysoev nginx 0.6.38 Igor Sysoev nginx 0.6.36 Igor Sysoev nginx 0.6.32 Igor Sysoev nginx 0.6 Igor Sysoev nginx 0.5.38 Igor Sysoev nginx 0.5.37 Igor Sysoev nginx 0.5 Gentoo Linux
Not Vulnerable:	Igor Sysoev nginx 1.0.10

nginx DNS Resolver Remote Heap Buffer Overflow Vulnerability

nginx is prone to a remote heap-based buffer-overflow vulnerability.

Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition.

Versions prior to nginx 1.0.10 are vulnerable.

nginx DNS Resolver Remote Heap Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

nginx DNS Resolver Remote Heap Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.

nginx DNS Resolver Remote Heap Buffer Overflow Vulnerability

References:

• nginx Homepage (Igor Sysoev)
  
• Changes in nginx (nginx)
  
• Changeset 4268 in nginx (Ben Hawkes)