[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250053

 
 

909

 
 

195940

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS2NGINX1-2023-003 --- nginx

ID: oval:org.secpod.oval:def:1701658Date: (C)2023-10-26   (M)2023-11-13
Class: PATCHFamily: unix




A flaw was found in nginx. An off-by-one error while processing DNS responses allows a network attacker to write a dot character out of bounds in a heap allocated buffer which can allow overwriting the least significant byte of next heap chunk metadata likely leading to a remote code execution in certain circumstances. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability

Platform:
Amazon Linux 2
Product:
nginx
Reference:
ALAS2NGINX1-2023-003
CVE-2021-23017
CVE    1
CVE-2021-23017
CPE    2
cpe:/a:igor_sysoev:nginx
cpe:/o:amazon:linux:2

© SecPod Technologies