1 matches found
nginx 1.20.0 DNS Resolver Off-By-One Heap Write Exploit
An off-by-one error in ngxresolvercopy while processing DNS responses allows a network attacker to write a dot character '.', 0x2E out of bounds in a heap allocated buffer. The vulnerability can be triggered by a DNS response in reply to a DNS request from nginx when the resolver primitive is...
7.7CVSS0.7AI score0.53461EPSS
SaveExploits10
20