Test ID:	1.3.6.1.4.1.25623.1.0.117455
Category:	Web Servers
Title:	nginx 0.6.18 - 1.20.0 1-byte Memory Overwrite Vulnerability
Summary:	nginx is prone to a 1-byte memory overwrite vulnerability.
Description:	Summary: nginx is prone to a 1-byte memory overwrite vulnerability. Vulnerability Insight: A security issue in nginx resolver was identified, which might allow an attacker to cause 1-byte memory overwrite by using a specially crafted DNS response, resulting in worker process crash or, potentially, in arbitrary code execution. Affected Software/OS: nginx version 0.6.18 through 1.20.0. Note: The issue only affects nginx if the 'resolver' directive is used in the configuration file. Further, the attack is only possible if an attacker is able to forge UDP packets from the DNS server. Solution: Update to version 1.20.1, 1.21.0 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-23017 https://security.netapp.com/advisory/ntap-20210708-0006/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7SFVYHC7OXTEO4SMBWXDVK6E5IMEYMEE/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNKOP2JR5L7KCIZTJRZDCUPJTUONMC5I/ http://packetstormsecurity.com/files/167720/Nginx-1.20.0-Denial-Of-Service.html http://mailman.nginx.org/pipermail/nginx-announce/2021/000300.html https://support.f5.com/csp/article/K12331123, https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpuoct2021.html https://lists.apache.org/thread.html/r6fc5c57b38e93e36213e9a18c8a4e5dbd5ced1c7e57f08a1735975ba@%3Cnotifications.apisix.apache.org%3E https://lists.apache.org/thread.html/r37e6b2165f7c910d8e15fd54f4697857619ad2625f56583802004009@%3Cnotifications.apisix.apache.org%3E https://lists.apache.org/thread.html/r4d4966221ca399ce948ef34884652265729d7d9ef8179c78d7f17e7f@%3Cnotifications.apisix.apache.org%3E https://lists.apache.org/thread.html/rf318aeeb4d7a3a312734780b47de83cefb7e6995da0b2cae5c28675c@%3Cnotifications.apisix.apache.org%3E https://lists.apache.org/thread.html/rf232eecd47fdc44520192810560303073cefd684b321f85e311bad31@%3Cnotifications.apisix.apache.org%3E
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.