CVE-2012-1180

Published: Apr 17, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from process memory via a crafted backend response, in conjunction with a client request.

Affected (6)

Products: F5: Nginx · Fedoraproject: Fedora · Debian: Debian Linux

1 product

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
F5 Nginx	From 0.1.0 to 1.0.14
F5 Nginx	From 1.1.0 to 1.1.17

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 15
Fedoraproject Fedora	Version 16
Fedoraproject Fedora	Version 17

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 6.0

Related CWEs

CWE-416

Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (42)

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077966.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076646.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076671.html

Source: secalert@redhat.com

Third Party Advisory

http://nginx.org/download/patch.2012.memory.txt

Source: secalert@redhat.com

PatchVendor Advisory

http://nginx.org/en/security_advisories.html

Source: secalert@redhat.com

PatchVendor Advisory

http://osvdb.org/80124

Source: secalert@redhat.com

Broken Link

http://seclists.org/bugtraq/2012/Mar/65

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://secunia.com/advisories/48465

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/48577

Source: secalert@redhat.com

Third Party Advisory

http://security.gentoo.org/glsa/glsa-201203-22.xml

Source: secalert@redhat.com

Third Party Advisory

http://trac.nginx.org/nginx/changeset/4530/nginx

Source: secalert@redhat.com

PatchVendor Advisory

http://trac.nginx.org/nginx/changeset/4531/nginx

Source: secalert@redhat.com

PatchVendor Advisory

http://www.debian.org/security/2012/dsa-2434

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2012:043

Source: secalert@redhat.com

Third Party Advisory

http://www.openwall.com/lists/oss-security/2012/03/15/5

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2012/03/15/9

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://www.securityfocus.com/bid/52578

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1026827

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=803856

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/74191

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://hermes.opensuse.org/messages/14173096

Source: secalert@redhat.com

Broken Link

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077966.html