CVE-2021-23017
Assigner: f5
Published: 2021-06-01T12:28:09
State: PUBLISHED
affected: product: Nginx Web Server, Nginx Plus
vendor: n/a
versions: status: affected
version: Nginx Web Server versions 0.6.18 thru 1.20.0 before 1.20.1, Nginx plus versions R13 thru R23 before R23 P1. Nginx plus version R24 before R24 P1
descriptions: value: A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.
problemTypes: descriptions: cweId: CWE-193
description: CWE-193
type: CWE