132 matches found
nginx:1.18 security update
An update is available for nginx. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other protocols, with a foc...
Important: nginx:1.18 security update
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: Off-by-one in ngxresolvercopy when labels are followed by a pointer to a root domain name CVE-2021-23017 For more details about the...
ALSA-2021:2259 Important: nginx:1.18 security update
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: Off-by-one in ngxresolvercopy when labels are followed by a pointer to a root domain name CVE-2021-23017 For more details about the...
Important: Red Hat Security Advisory: rh-nginx118-nginx security update
An update for rh-nginx118-nginx is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
openSUSE: Security Advisory for nginx (openSUSE-SU-2021:0835-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE Security Update : nginx (openSUSE-2021-835)
This update for nginx fixes the following issues : - CVE-2021-23017: nginx DNS resolver off-by-one heap write bsc1186126 This update was imported from the SUSE:SLE-15-SP1:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
OPENSUSE-SU-2021:0835-1 Security update for nginx
This update for nginx fixes the following issues: - CVE-2021-23017: nginx DNS resolver off-by-one heap write bsc1186126 This update was imported from the SUSE:SLE-15-SP1:Update update project...
SUSE SLES15 Security Update : nginx (SUSE-SU-2021:1839-1)
This update for nginx fixes the following issues : CVE-2021-23017: nginx DNS resolver off-by-one heap write bsc1186126 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format...
SUSE-SU-2021:1839-1 Security update for nginx
This update for nginx fixes the following issues: - CVE-2021-23017: nginx DNS resolver off-by-one heap write bsc1186126...
Amazon Linux AMI : nginx (ALAS-2021-1507)
The version of nginx installed on the remote host is prior to 1.18.0-1.43. It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1507 advisory. A flaw was found in nginx. An off-by-one error while processing DNS responses allows a network attacker to write a dot character o...
Important: nginx
Issue Overview: A flaw was found in nginx. An off-by-one error while processing DNS responses allows a network attacker to write a dot character out of bounds in a heap allocated buffer which can allow overwriting the least significant byte of next heap chunk metadata likely leading to a remote...
ALPINE-CVE-2021-23017
A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact...
CVE-2021-23017
A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact...
CVE-2021-23017
CVE-2021-23017 affects nginx's resolver. A security issue arises from an off-by-one in ngx_resolver_copy when DNS labels are followed by a root-domain pointer, allowing a crafted UDP response to overwrite the least significant byte of the next heap chunk metadata. This can lead to a worker proces...
1-byte memory overwrite in resolver
1-byte memory overwrite in resolver Severity: medium CVE-2021-23017 Not vulnerable: 1.21.0+, 1.20.1+ Vulnerable: 0.6.18-1.20.0...
SUSE SLES15 Security Update : nginx (SUSE-SU-2021:1815-1)
This update for nginx fixes the following issues : CVE-2021-23017: nginx DNS resolver off-by-one heap write bsc1186126 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format...
SUSE SLES15 Security Update : nginx (SUSE-SU-2021:1814-1)
This update for nginx fixes the following issues : CVE-2021-23017: nginx DNS resolver off-by-one heap write bsc1186126 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format...
SUSE SLES15 Security Update : nginx (SUSE-SU-2021:1792-1)
This update for nginx fixes the following issues : CVE-2021-23017: nginx DNS resolver off-by-one heap write bsc1186126 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format...