Use-after-free in NGINX Open Source - CVE-2012-1180
Published: April 18, 2012 / Updated: July 28, 2020
Vulnerability identifier: #VU32813
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2012-1180
CWE-ID: CWE-416
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a use-after-free error when processing a crafted backend response, in conjunction with a client request. A remote HTTP servers can obtain sensitive information from process memory.
Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.
Affected software
NGINX Open Source
Amazon Linux AMI
Fedora
nginx (Alpine package)
nginx
Amazon Linux AMI
Fedora
nginx (Alpine package)
nginx
How to mitigate CVE-2012-1180
The vendor has issued the following versions to address this vulnerability: 1.0.14, 1.1.17.
NGINX Open Source - addressed in versions 1.0.14, 1.1.17
nginx (Alpine package) - update to 0.8.55-r0
nginx - addressed in versions 0.8.55-2.el5, 1.0.14-1.el6
nginx (Alpine package) - update to 0.8.55-r0
nginx - addressed in versions 0.8.55-2.el5, 1.0.14-1.el6
External References
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077966.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076646.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076671.html
- http://nginx.org/download/patch.2012.memory.txt
- http://nginx.org/en/security_advisories.html
- http://osvdb.org/80124
- http://seclists.org/bugtraq/2012/Mar/65
- http://secunia.com/advisories/48465
- http://secunia.com/advisories/48577
- http://security.gentoo.org/glsa/glsa-201203-22.xml
- http://trac.nginx.org/nginx/changeset/4530/nginx
- http://trac.nginx.org/nginx/changeset/4531/nginx
- http://www.debian.org/security/2012/dsa-2434
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:043
- http://www.openwall.com/lists/oss-security/2012/03/15/5
- http://www.openwall.com/lists/oss-security/2012/03/15/9
- http://www.securityfocus.com/bid/52578
- http://www.securitytracker.com/id?1026827
- https://bugzilla.redhat.com/show_bug.cgi?id=803856
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74191
- https://hermes.opensuse.org/messages/14173096