A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.
CVSS Details
- CVSS 3.1 Base Score: 7.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nginx-filesystemUpgrade nginxUpgrade nginx-all-modulesUpgrade nginx-mod-streamUpgrade nginx-mod-http-perlUpgrade nginx-mod-http-xslt-filterUpgrade nginx-mod-http-image-filterUpgrade nginx-mod-mail | May 4, 2022 | Jun 1, 2021 |
| Alpine Linux | — | Upgrade nginx | Mar 26, 2024 | Jun 1, 2021 |
| Amazon Linux Ami 2 | — | Upgrade nginx-all-modulesUpgrade nginx-mod-http-perlUpgrade nginx-mod-http-geoipUpgrade nginx-mod-http-image-filterUpgrade nginxUpgrade nginx-mod-streamUpgrade nginx-filesystemUpgrade nginx-mod-http-xslt-filterUpgrade nginx-debuginfoUpgrade nginx-mod-mail | Sep 28, 2023 | Jun 1, 2021 |
| Amazon_linux | — | Upgrade nginx | Jun 3, 2021 | May 26, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 1, 2021 |
| Centos_linux | — | Upgrade nginx-mod-http-xslt-filter-debuginfoUpgrade nginx-mod-mail-debuginfoUpgrade nginx-mod-stream-debuginfoUpgrade nginx-mod-http-perl-debuginfoUpgrade nginx-mod-mailUpgrade nginx-mod-http-image-filter-debuginfoUpgrade nginxUpgrade nginx-all-modulesUpgrade nginx-mod-streamUpgrade nginx-debugsourceUpgrade nginx-mod-http-perlUpgrade nginx-mod-http-image-filterUpgrade nginx-debuginfoUpgrade nginx-mod-http-xslt-filterUpgrade nginx-filesystem | Jun 8, 2021 | Jun 1, 2021 |
| Debian | — | Upgrade nginx | May 31, 2021 | May 31, 2021 |
| Freebsd | — | Upgrade nginx-develUpgrade nginx | Nov 4, 2022 | May 25, 2021 |
| Gentoo Linux | — | Upgrade www-servers/nginx. | May 28, 2021 | May 26, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nginx | Sep 16, 2021 | Jun 1, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade nginx | Oct 26, 2021 | Jun 1, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nginxUpgrade nginx-all-modulesUpgrade nginx-mod-http-perlUpgrade nginx-filesystemUpgrade nginx-mod-http-image-filterUpgrade nginx-mod-mailUpgrade nginx-mod-http-xslt-filterUpgrade nginx-mod-stream | Sep 7, 2021 | Jun 1, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade nginx-mod-mailUpgrade nginxUpgrade nginx-filesystemUpgrade nginx-all-modulesUpgrade nginx-mod-http-perlUpgrade nginx-mod-http-image-filterUpgrade nginx-mod-http-xslt-filterUpgrade nginx-mod-stream | Aug 10, 2021 | Jun 1, 2021 |
| Nginx | — | Upgrade to nginx version 1.20.1Upgrade to nginx version 1.21.0 | Jun 1, 2021 | Jun 1, 2021 |
| Oracle_linux | — | Upgrade nginx-all-modulesUpgrade nginx-mod-http-perlUpgrade nginx-mod-mailUpgrade nginxUpgrade nginx-mod-http-image-filterUpgrade nginx-mod-http-xslt-filterUpgrade nginx-mod-streamUpgrade nginx-filesystem | Jun 9, 2021 | May 25, 2021 |
| Redhat_linux | — | Upgrade nginx-mod-http-perlUpgrade nginx-debugsourceUpgrade nginx-mod-http-perl-debuginfoUpgrade nginx-filesystemUpgrade nginx-mod-http-image-filter-debuginfoUpgrade nginx-mod-stream-debuginfoUpgrade nginx-mod-streamUpgrade nginx-debuginfoUpgrade nginx-mod-http-xslt-filterUpgrade nginx-mod-mail-debuginfoUpgrade nginx-all-modulesUpgrade nginx-mod-mailUpgrade nginx-mod-http-image-filterUpgrade nginx-mod-http-xslt-filter-debuginfoUpgrade nginxNo solution exists | Jun 8, 2021 | Jun 1, 2021 |
| Rocky_linux | — | Upgrade nginx-mod-streamUpgrade nginx-mod-http-xslt-filter-debuginfoUpgrade nginxUpgrade nginx-mod-http-perlUpgrade nginx-mod-http-image-filterUpgrade nginx-mod-http-perl-debuginfoUpgrade nginx-mod-http-image-filter-debuginfoUpgrade nginx-debuginfoUpgrade nginx-mod-mailUpgrade nginx-mod-http-xslt-filterUpgrade nginx-debugsourceUpgrade nginx-mod-mail-debuginfoUpgrade nginx-mod-stream-debuginfo | May 5, 2022 | Jun 1, 2021 |
| Suse | — | Upgrade nginxUpgrade nginx-sourceUpgrade vim-plugin-nginx | May 28, 2021 | May 26, 2021 |
| Ubuntu | — | Upgrade nginx-light (Ubuntu Pro)Upgrade nginx-full (Ubuntu Pro)Upgrade nginx (Ubuntu Pro)Upgrade nginx-extrasUpgrade nginx-fullUpgrade nginxUpgrade nginx-common (Ubuntu Pro)Upgrade nginx-commonUpgrade nginx-extras (Ubuntu Pro)Upgrade nginx-lightUpgrade nginx-coreUpgrade nginx-core (Ubuntu Pro) | May 27, 2021 | May 26, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 1, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub