CVE-2021-23017

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

Affected products

Alt Linux, Almalinux, Centos, Linuxmint, Nginx, Red Hat, Red Os, Rocky Linux

f5 Nginx

< 1.20.1

Fix

Available

CVSS 3.1

7.7 HIGH

EPSS

53.5% (99th percentile)

Weakness

CWE-193

NVD status

Modified

Published

2021-06-01