NetSight
IP …
high7.7Public exploit code

CVE-2021-23017

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory ov…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

Affected products

VendorProductAffected versions
F5Nginx
from 0.6.18 before 1.20.1
OpenrestyOpenresty
before 1.19.3.2
FedoraprojectFedora
Versions 33, 34
NetappOntap Select Deploy Administration Utility
All versions
OracleBlockchain Platform
before 21.1.2
OracleCommunications Control Plane Monitor
Versions 3.4, 4.2, 4.3, 4.4
OracleCommunications Fraud Monitor
from 3.4 through 4.4
OracleCommunications Operations Monitor
Versions 3.4, 4.2, 4.3, 4.4
OracleCommunications Session Border Controller
Versions 8.4, 9.0
OracleEnterprise Communications Broker
Version 3.3.0
OracleEnterprise Session Border Controller
Versions 8.4, 9.0
OracleEnterprise Telephony Fraud Monitor
Versions 3.4, 4.2, 4.3, 4.4

Weakness classification

CWE-193

References