Test Kennung:	1.3.6.1.4.1.25623.1.0.117455
Kategorie:	Web Servers
Titel:	nginx 0.6.18 - 1.20.0 1-byte Memory Overwrite Vulnerability
Zusammenfassung:	nginx is prone to a 1-byte memory overwrite vulnerability.
Beschreibung:	Summary: nginx is prone to a 1-byte memory overwrite vulnerability. Vulnerability Insight: A security issue in nginx resolver was identified, which might allow an attacker to cause 1-byte memory overwrite by using a specially crafted DNS response, resulting in worker process crash or, potentially, in arbitrary code execution. Affected Software/OS: nginx version 0.6.18 through 1.20.0. Note: The issue only affects nginx if the 'resolver' directive is used in the configuration file. Further, the attack is only possible if an attacker is able to forge UDP packets from the DNS server. Solution: Update to version 1.20.1, 1.21.0 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2021-23017 https://security.netapp.com/advisory/ntap-20210708-0006/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7SFVYHC7OXTEO4SMBWXDVK6E5IMEYMEE/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNKOP2JR5L7KCIZTJRZDCUPJTUONMC5I/ http://packetstormsecurity.com/files/167720/Nginx-1.20.0-Denial-Of-Service.html http://mailman.nginx.org/pipermail/nginx-announce/2021/000300.html https://support.f5.com/csp/article/K12331123, https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpuoct2021.html https://lists.apache.org/thread.html/r6fc5c57b38e93e36213e9a18c8a4e5dbd5ced1c7e57f08a1735975ba@%3Cnotifications.apisix.apache.org%3E https://lists.apache.org/thread.html/r37e6b2165f7c910d8e15fd54f4697857619ad2625f56583802004009@%3Cnotifications.apisix.apache.org%3E https://lists.apache.org/thread.html/r4d4966221ca399ce948ef34884652265729d7d9ef8179c78d7f17e7f@%3Cnotifications.apisix.apache.org%3E https://lists.apache.org/thread.html/rf318aeeb4d7a3a312734780b47de83cefb7e6995da0b2cae5c28675c@%3Cnotifications.apisix.apache.org%3E https://lists.apache.org/thread.html/rf232eecd47fdc44520192810560303073cefd684b321f85e311bad31@%3Cnotifications.apisix.apache.org%3E
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.