CVE-2011-4315

Heap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a long response.

• CWE-787

• http://lists.fedoraproject.org/pipermail/package-announce/2011-December/070569.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00005.htmlMailing List, Third Party Advisory
• http://openwall.com/lists/oss-security/2011/11/17/10Mailing List, Patch, Third Party Advisory
• http://openwall.com/lists/oss-security/2011/11/17/8Mailing List, Patch, Third Party Advisory
• http://secunia.com/advisories/47097Third Party Advisory
• http://secunia.com/advisories/48577Third Party Advisory
• http://security.gentoo.org/glsa/glsa-201203-22.xmlThird Party Advisory
• http://trac.nginx.org/nginx/changeset/4268/nginxIssue Tracking, Patch, Vendor Advisory
• http://www.nginx.org/en/CHANGES-1.0Release Notes, Vendor Advisory
• http://www.securityfocus.com/bid/50710Third Party Advisory, VDB Entry
• http://lists.fedoraproject.org/pipermail/package-announce/2011-December/070569.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00005.htmlMailing List, Third Party Advisory
• http://openwall.com/lists/oss-security/2011/11/17/10Mailing List, Patch, Third Party Advisory
• http://openwall.com/lists/oss-security/2011/11/17/8Mailing List, Patch, Third Party Advisory
• http://secunia.com/advisories/47097Third Party Advisory
• http://secunia.com/advisories/48577Third Party Advisory
• http://security.gentoo.org/glsa/glsa-201203-22.xmlThird Party Advisory
• http://trac.nginx.org/nginx/changeset/4268/nginxIssue Tracking, Patch, Vendor Advisory
• http://www.nginx.org/en/CHANGES-1.0Release Notes, Vendor Advisory
• http://www.securityfocus.com/bid/50710Third Party Advisory, VDB Entry

Published

Dec 8, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-4309Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remo…
• CVE-2011-4310The news module in CMSMS before 1.9.4.3 allows remote attack…7.5
• CVE-2011-4311ResourceSpace before 4.2.2833 does not properly validate acc…
• CVE-2011-4312Multiple cross-site scripting (XSS) vulnerabilities in the c…
• CVE-2011-4313query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4…
• CVE-2011-4314message/ax/AxMessage.java in OpenID4Java before 0.9.6 final,…
• CVE-2011-4316Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.…
• CVE-2011-4317The mod_proxy module in the Apache HTTP Server 1.3.x through…
• CVE-2011-4318Dovecot 2.0.x before 2.0.16, when ssl or starttls is enabled…
• CVE-2011-4319Cross-site scripting (XSS) vulnerability in the i18n transla…
• CVE-2011-4320The mod_pubsub module (mod_pubsub.erl) in ejabberd 2.1.8 and…
• CVE-2011-4321The password reset functionality in Joomla! 1.5.x through 1.…