Description

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

Remediation

References

CVE-2021-23017

Related Vulnerabilities

WordPress Plugin Smush Image Compression and Optimization Multiple Vulnerabilities (2.9.1)

Internet Information Services Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2002-1700)

WordPress Plugin SEO by Squirrly SEO Multiple Unspecified Vulnerabilities (6.1.4)

Oracle Database Server CVE-2009-1985 Vulnerability (CVE-2009-1985)

Serendipity Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3800)

Severity

High

Classification

CVE-2021-23017 CWE-193 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

Tags

Missing Update Known Vulnerabilities