Lucene search
+L

1 matches found

zdt
zdt
added 2021/05/27 12:00 a.m.4537 views

nginx 1.20.0 DNS Resolver Off-By-One Heap Write Exploit

An off-by-one error in ngxresolvercopy while processing DNS responses allows a network attacker to write a dot character '.', 0x2E out of bounds in a heap allocated buffer. The vulnerability can be triggered by a DNS response in reply to a DNS request from nginx when the resolver primitive is...

7.7CVSS0.7AI score0.53461EPSS
SaveExploits10
Rows per page
Query Builder