CVE-2011-4315: F5 Nginx

Medium severity, CVSS 6.8. EPSS: 6% chance of exploitation in the next 30 days.

Heap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a long response.

Affected products

• F5 Nginx: from 0.6.18, before 1.0.10 (fixed in 1.0.10); from 1.1.0, up to and including 1.1.7
• Fedoraproject Fedora: version 16 only
• Suse Studio: version 1.2 only
• Suse Studio Onsite: version 1.2 only
• Suse Webyast: version 1.2 only

Published 2011-12-08. Last modified 2026-06-16.