CVE-2021-23017CWE-193

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory…

published June 1, 2021

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.

CVSS
—
EPSS
53%
Percentile
99.0
In the wild
Unconfirmed
What it is

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.53461 · 99.0th percentile
Weakness
CWE-193 · Off-by-one Error
Published
2021-06-01T12:28Z
EPSS history
Timeline
  • 01 JUN 12:28Z
    A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory…
    cvelistv5