Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2021-23017

Опубликовано: 01 июн. 2021
Источник: ubuntu
Приоритет: medium
EPSS Высокий
CVSS2: 6.8
CVSS3: 7.7

Описание

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

РелизСтатусПримечание
bionic

released

1.14.0-0ubuntu1.9
devel

released

1.18.0-6ubuntu9
esm-infra-legacy/trusty

not-affected

1.4.6-1ubuntu3.9+esm2
esm-infra/bionic

not-affected

1.14.0-0ubuntu1.9
esm-infra/focal

not-affected

1.18.0-0ubuntu1.2
esm-infra/xenial

released

1.10.3-0ubuntu0.16.04.5+esm1
focal

released

1.18.0-0ubuntu1.2
groovy

released

1.18.0-6ubuntu2.2
hirsute

released

1.18.0-6ubuntu8.2
impish

released

1.18.0-6ubuntu9

Показывать по

EPSS

Процентиль: 99%
0.76458
Высокий

6.8 Medium

CVSS2

7.7 High

CVSS3

Связанные уязвимости

CVSS3: 8.1
redhat
около 4 лет назад

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVSS3: 7.7
nvd
около 4 лет назад

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVSS3: 7.7
msrc
около 4 лет назад

Описание отсутствует

CVSS3: 7.7
debian
около 4 лет назад

A security issue in nginx resolver was identified, which might allow a ...

suse-cvrf
почти 4 года назад

Security update for nginx

EPSS

Процентиль: 99%
0.76458
Высокий

6.8 Medium

CVSS2

7.7 High

CVSS3