A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.
CVSS Details
- CVSS 3.1 Base Score: 7.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nginx-mod-mailUpgrade nginx-mod-http-perlUpgrade nginx-mod-streamUpgrade nginx-mod-http-xslt-filterUpgrade nginx-mod-http-image-filterUpgrade nginx-all-modulesUpgrade nginx-filesystemUpgrade nginx | May 4, 2022 | Jun 1, 2021 |
| Alpine Linux | — | Upgrade nginx | Mar 26, 2024 | Jun 1, 2021 |
| Amazon Linux Ami 2 | — | Upgrade nginx-mod-http-perlUpgrade nginx-mod-http-image-filterUpgrade nginxUpgrade nginx-all-modulesUpgrade nginx-mod-http-geoipUpgrade nginx-mod-streamUpgrade nginx-debuginfoUpgrade nginx-mod-http-xslt-filterUpgrade nginx-mod-mailUpgrade nginx-filesystem | Sep 28, 2023 | Jun 1, 2021 |
| Amazon_linux | — | Upgrade nginx | Jun 3, 2021 | May 26, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 1, 2021 |
| Centos_linux | — | Upgrade nginx-mod-http-xslt-filterUpgrade nginx-mod-http-perlUpgrade nginx-filesystemUpgrade nginx-debugsourceUpgrade nginx-mod-http-image-filterUpgrade nginx-mod-streamUpgrade nginx-debuginfoUpgrade nginx-mod-stream-debuginfoUpgrade nginx-mod-mail-debuginfoUpgrade nginx-mod-http-image-filter-debuginfoUpgrade nginxUpgrade nginx-mod-http-perl-debuginfoUpgrade nginx-all-modulesUpgrade nginx-mod-mailUpgrade nginx-mod-http-xslt-filter-debuginfo | Jun 8, 2021 | Jun 1, 2021 |
| Debian | — | Upgrade nginx | May 31, 2021 | May 31, 2021 |
| Freebsd | — | Upgrade nginxUpgrade nginx-devel | Nov 4, 2022 | May 25, 2021 |
| Gentoo Linux | — | Upgrade www-servers/nginx. | May 28, 2021 | May 26, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nginx | Sep 16, 2021 | Jun 1, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade nginx | Oct 26, 2021 | Jun 1, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nginx-mod-http-xslt-filterUpgrade nginx-mod-streamUpgrade nginx-mod-http-image-filterUpgrade nginxUpgrade nginx-mod-http-perlUpgrade nginx-all-modulesUpgrade nginx-mod-mailUpgrade nginx-filesystem | Sep 7, 2021 | Jun 1, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade nginx-mod-http-image-filterUpgrade nginx-mod-streamUpgrade nginx-mod-http-perlUpgrade nginx-mod-http-xslt-filterUpgrade nginx-filesystemUpgrade nginx-all-modulesUpgrade nginxUpgrade nginx-mod-mail | Aug 10, 2021 | Jun 1, 2021 |
| Nginx | — | Upgrade to nginx version 1.20.1Upgrade to nginx version 1.21.0 | Jun 1, 2021 | Jun 1, 2021 |
| Oracle_linux | — | Upgrade nginx-all-modulesUpgrade nginx-mod-http-image-filterUpgrade nginxUpgrade nginx-mod-http-perlUpgrade nginx-mod-mailUpgrade nginx-mod-streamUpgrade nginx-filesystemUpgrade nginx-mod-http-xslt-filter | Jun 9, 2021 | May 25, 2021 |
| Redhat_linux | — | Upgrade nginxNo solution existsUpgrade nginx-mod-http-image-filterUpgrade nginx-mod-http-xslt-filter-debuginfoUpgrade nginx-mod-mailUpgrade nginx-all-modulesUpgrade nginx-mod-stream-debuginfoUpgrade nginx-mod-http-image-filter-debuginfoUpgrade nginx-mod-streamUpgrade nginx-mod-http-perlUpgrade nginx-mod-mail-debuginfoUpgrade nginx-mod-http-xslt-filterUpgrade nginx-debugsourceUpgrade nginx-filesystemUpgrade nginx-mod-http-perl-debuginfoUpgrade nginx-debuginfo | Jun 8, 2021 | Jun 1, 2021 |
| Rocky_linux | — | Upgrade nginx-mod-stream-debuginfoUpgrade nginx-mod-mail-debuginfoUpgrade nginx-mod-http-perl-debuginfoUpgrade nginx-mod-http-image-filter-debuginfoUpgrade nginx-mod-http-xslt-filterUpgrade nginx-debuginfoUpgrade nginx-debugsourceUpgrade nginx-mod-mailUpgrade nginx-mod-http-image-filterUpgrade nginx-mod-http-xslt-filter-debuginfoUpgrade nginx-mod-streamUpgrade nginxUpgrade nginx-mod-http-perl | May 5, 2022 | Jun 1, 2021 |
| Suse | — | Upgrade nginxUpgrade nginx-sourceUpgrade vim-plugin-nginx | May 28, 2021 | May 26, 2021 |
| Ubuntu | — | Upgrade nginx-fullUpgrade nginx (Ubuntu Pro)Upgrade nginx-light (Ubuntu Pro)Upgrade nginx-full (Ubuntu Pro)Upgrade nginx-extrasUpgrade nginx-common (Ubuntu Pro)Upgrade nginxUpgrade nginx-extras (Ubuntu Pro)Upgrade nginx-core (Ubuntu Pro)Upgrade nginx-coreUpgrade nginx-commonUpgrade nginx-light | May 27, 2021 | May 26, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 1, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub