Description

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

Remediation

References

CVE-2021-23017

Related Vulnerabilities

WordPress Plugin Happy Addons for Elementor Pro Cross-Site Scripting (1.16.0)

WordPress Plugin FireStorm Professional Real Estate 'id' Parameter SQL Injection (2.06.03)

ATutor Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-12170)

WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Multiple Vulnerabilities (1.2.9)

Payara URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2024-7312)

Severity

High

Classification

CVE-2021-23017 CWE-193 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

Tags

Missing Update Known Vulnerabilities