A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.
CVSS Details
- CVSS 3.1 Base Score: 7.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nginx-filesystemUpgrade nginxUpgrade nginx-mod-http-image-filterUpgrade nginx-mod-streamUpgrade nginx-mod-http-xslt-filterUpgrade nginx-mod-http-perlUpgrade nginx-all-modulesUpgrade nginx-mod-mail | May 4, 2022 | Jun 1, 2021 |
| Alpine Linux | — | Upgrade nginx | Mar 26, 2024 | Jun 1, 2021 |
| Amazon Linux Ami 2 | — | Upgrade nginx-mod-streamUpgrade nginx-mod-http-image-filterUpgrade nginxUpgrade nginx-mod-http-perlUpgrade nginx-mod-http-geoipUpgrade nginx-all-modulesUpgrade nginx-mod-http-xslt-filterUpgrade nginx-mod-mailUpgrade nginx-filesystemUpgrade nginx-debuginfo | Sep 28, 2023 | Jun 1, 2021 |
| Amazon_linux | — | Upgrade nginx | Jun 3, 2021 | May 26, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 1, 2021 |
| Centos_linux | — | Upgrade nginx-mod-stream-debuginfoUpgrade nginx-mod-http-xslt-filter-debuginfoUpgrade nginx-mod-mailUpgrade nginx-mod-http-image-filter-debuginfoUpgrade nginx-mod-mail-debuginfoUpgrade nginxUpgrade nginx-all-modulesUpgrade nginx-mod-http-perl-debuginfoUpgrade nginx-mod-http-image-filterUpgrade nginx-mod-http-perlUpgrade nginx-mod-http-xslt-filterUpgrade nginx-filesystemUpgrade nginx-debuginfoUpgrade nginx-mod-streamUpgrade nginx-debugsource | Jun 8, 2021 | Jun 1, 2021 |
| Debian | — | Upgrade nginx | May 31, 2021 | May 31, 2021 |
| Freebsd | — | Upgrade nginxUpgrade nginx-devel | Nov 4, 2022 | May 25, 2021 |
| Gentoo Linux | — | Upgrade www-servers/nginx. | May 28, 2021 | May 26, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nginx | Sep 16, 2021 | Jun 1, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade nginx | Oct 26, 2021 | Jun 1, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nginx-mod-http-xslt-filterUpgrade nginx-mod-streamUpgrade nginxUpgrade nginx-mod-http-perlUpgrade nginx-filesystemUpgrade nginx-mod-http-image-filterUpgrade nginx-mod-mailUpgrade nginx-all-modules | Sep 7, 2021 | Jun 1, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade nginx-mod-http-xslt-filterUpgrade nginx-mod-http-image-filterUpgrade nginx-mod-streamUpgrade nginx-mod-http-perlUpgrade nginxUpgrade nginx-all-modulesUpgrade nginx-filesystemUpgrade nginx-mod-mail | Aug 10, 2021 | Jun 1, 2021 |
| Nginx | — | Upgrade to nginx version 1.21.0Upgrade to nginx version 1.20.1 | Jun 1, 2021 | Jun 1, 2021 |
| Oracle_linux | — | Upgrade nginx-mod-mailUpgrade nginx-all-modulesUpgrade nginx-mod-http-perlUpgrade nginxUpgrade nginx-mod-http-image-filterUpgrade nginx-filesystemUpgrade nginx-mod-http-xslt-filterUpgrade nginx-mod-stream | Jun 9, 2021 | May 25, 2021 |
| Redhat_linux | — | Upgrade nginx-mod-http-xslt-filter-debuginfoUpgrade nginx-mod-http-image-filterUpgrade nginxNo solution existsUpgrade nginx-mod-http-perl-debuginfoUpgrade nginx-mod-http-xslt-filterUpgrade nginx-mod-mail-debuginfoUpgrade nginx-all-modulesUpgrade nginx-filesystemUpgrade nginx-debuginfoUpgrade nginx-mod-streamUpgrade nginx-mod-http-image-filter-debuginfoUpgrade nginx-debugsourceUpgrade nginx-mod-mailUpgrade nginx-mod-http-perlUpgrade nginx-mod-stream-debuginfo | Jun 8, 2021 | Jun 1, 2021 |
| Rocky_linux | — | Upgrade nginx-mod-http-perl-debuginfoUpgrade nginx-mod-stream-debuginfoUpgrade nginx-mod-http-image-filter-debuginfoUpgrade nginx-mod-mail-debuginfoUpgrade nginx-mod-mailUpgrade nginx-debugsourceUpgrade nginx-mod-http-xslt-filterUpgrade nginx-debuginfoUpgrade nginxUpgrade nginx-mod-http-perlUpgrade nginx-mod-http-image-filterUpgrade nginx-mod-streamUpgrade nginx-mod-http-xslt-filter-debuginfo | May 5, 2022 | Jun 1, 2021 |
| Suse | — | Upgrade nginxUpgrade nginx-sourceUpgrade vim-plugin-nginx | May 28, 2021 | May 26, 2021 |
| Ubuntu | — | Upgrade nginxUpgrade nginx-coreUpgrade nginx-core (Ubuntu Pro)Upgrade nginx-commonUpgrade nginx-common (Ubuntu Pro)Upgrade nginx-lightUpgrade nginx-extras (Ubuntu Pro)Upgrade nginx-full (Ubuntu Pro)Upgrade nginx-fullUpgrade nginx-extrasUpgrade nginx (Ubuntu Pro)Upgrade nginx-light (Ubuntu Pro) | May 27, 2021 | May 26, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 1, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub