Lucene search

CVE-2021-23017

🗓️ 01 Jun 2021 13:07:15Reported by f5Type

cve🔗 web.nvd.nist.gov👁 5268 Views🌐 10 Media mentions

A security issue in nginx resolver may cause 1-byte memory overwrite

Reporter	Title	Published	Views	Family All 199
IBM Security Bulletins	Security Bulletin: IBM API Connect V5 is impacted by a vulnerability in nginx. (CVE-2021-23017)	25 Aug 202113:37	–	ibm
IBM Security Bulletins	Security Bulletin: nginx is vulnerable to CVE-2021-23017 used in IBM Maximo Application Suite - Edge Data Collector Component	1 Mar 202416:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Nginx	1 Oct 202106:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Machine Learning Accelerator is affected by a vulnerability in Nginx	31 Aug 202101:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in F5 NGINX Controller affect IBM Cloud Pak for Automation	12 Aug 202122:14	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Linux Kernel, Docker, Python, and NGINX affect IBM Spectrum Protect Plus	10 Dec 202118:57	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.	11 Apr 202311:47	–	ibm
OSV	nginx - security update	30 May 202100:00	–	osv
OSV	nginx vulnerability	26 May 202113:50	–	osv
OSV	Red Hat Security Advisory: rh-nginx116-nginx security update	13 Sep 202420:26	–	osv

Nvd

Node

f5 nginxRange0.6.18–1.20.1

Node

openresty openrestyRange<1.19.3.2

Node

fedoraproject fedoraMatch33

fedoraproject fedoraMatch34

Node

netapp ontap_select_deploy_administration_utilityMatch-

Node

oracle blockchain_platformRange<21.1.2

oracle communications_control_plane_monitorMatch3.4

oracle communications_control_plane_monitorMatch4.2

oracle communications_control_plane_monitorMatch4.3

oracle communications_control_plane_monitorMatch4.4

oracle communications_fraud_monitorRange3.4–4.4

oracle communications_operations_monitorMatch3.4

oracle communications_operations_monitorMatch4.2

oracle communications_operations_monitorMatch4.3

oracle communications_operations_monitorMatch4.4

oracle communications_session_border_controllerMatch8.4

oracle communications_session_border_controllerMatch9.0

oracle enterprise_communications_brokerMatch3.3.0

oracle enterprise_session_border_controllerMatch8.4

oracle enterprise_session_border_controllerMatch9.0

oracle enterprise_telephony_fraud_monitorMatch3.4

oracle enterprise_telephony_fraud_monitorMatch4.2

oracle enterprise_telephony_fraud_monitorMatch4.3

oracle enterprise_telephony_fraud_monitorMatch4.4

oracle goldengateRange<21.4.0.0.0

[
  {
    "product": "Nginx Web Server, Nginx Plus",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Nginx Web Server versions 0.6.18 thru 1.20.0 before 1.20.1, Nginx plus versions R13 thru R23 before R23 P1. Nginx plus version R24 before R24 P1"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com/security-alerts/cpujan2022.html
packetstormsecurity	www.packetstormsecurity.com/files/167720/Nginx-1.20.0-Denial-Of-Service.html
lists	www.lists.apache.org/thread.html/rf232eecd47fdc44520192810560303073cefd684b321f85e311bad31%40%3Cnotifications.apisix.apache.org%3E
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNKOP2JR5L7KCIZTJRZDCUPJTUONMC5I/
mailman	www.mailman.nginx.org/pipermail/nginx-announce/2021/000300.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7SFVYHC7OXTEO4SMBWXDVK6E5IMEYMEE/
lists	www.lists.apache.org/thread.html/rf318aeeb4d7a3a312734780b47de83cefb7e6995da0b2cae5c28675c%40%3Cnotifications.apisix.apache.org%3E
lists	www.lists.apache.org/thread.html/r37e6b2165f7c910d8e15fd54f4697857619ad2625f56583802004009%40%3Cnotifications.apisix.apache.org%3E
lists	www.lists.apache.org/thread.html/r4d4966221ca399ce948ef34884652265729d7d9ef8179c78d7f17e7f%40%3Cnotifications.apisix.apache.org%3E
lists	www.lists.apache.org/thread.html/r6fc5c57b38e93e36213e9a18c8a4e5dbd5ced1c7e57f08a1735975ba%40%3Cnotifications.apisix.apache.org%3E

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Jun 2021 13:15Current

6.3Medium risk

Vulners AI Score6.3

CVSS37.7

EPSS0.306

CWE-193