Maple Labs

CVE search · CVE-2021-23017

CVE-2021-23017

high 7.7

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

Open in the NVD CVE.org JSON

Details

Status
Modified
Published
Last changed
Source
f5sirt@f5.com
Weakness
CWE-193

Severity

VersionScoreVectorSource
CVSS 3.1 high 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L nvd@nist.govPrimary
CVSS 2.0 medium 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P nvd@nist.govPrimary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

  • f5 · nginx
  • openresty · openresty
  • fedoraproject · fedora
  • netapp · ontap_select_deploy_administration_utility
  • oracle · blockchain_platform
  • oracle · communications_control_plane_monitor
  • oracle · communications_fraud_monitor
  • oracle · communications_operations_monitor
  • oracle · communications_session_border_controller
  • oracle · enterprise_communications_broker
  • oracle · enterprise_session_border_controller
  • oracle · enterprise_telephony_fraud_monitor
  • oracle · goldengate

References