Lucene search

K
osvGoogleOSV:USN-4967-2
HistoryMay 27, 2021 - 1:12 p.m.

nginx vulnerability

2021-05-2713:12:38
Google
osv.dev
8
usn-4967-1
nginx
vulnerability
ubuntu
denial of service
arbitrary code
dns resolver

AI Score

8.1

Confidence

High

EPSS

0.316

Percentile

97.1%

USN-4967-1 fixed a vulnerability in nginx. This update provides
the corresponding update for Ubuntu 14.04 ESM and 16.04 ESM.

Original advisory details:

Luis Merino, Markus Vervier, and Eric Sesterhenn discovered that nginx
incorrectly handled responses to the DNS resolver. A remote attacker could
use this issue to cause nginx to crash, resulting in a denial of service,
or possibly execute arbitrary code.