Description

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

Remediation

References

CVE-2021-23017

Related Vulnerabilities

WordPress Plugin Daily Prayer Time Cross-Site Scripting (2021.08.07)

Plone CMS Improper Restriction of XML External Entity Reference Vulnerability (CVE-2020-28736)

Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2006-7196)

Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-5267)

MyBB Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-3967)

Severity

High

Classification

CVE-2021-23017 CWE-193 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

Tags

Missing Update Known Vulnerabilities