VULNERABILITY INTELLIGENCE

CVE-2021-23017

CVSS score7.7 HIGH
EPSS probability53.46%
CISA KEVNot currently listed
Published2021-06-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

Description

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

Weakness classification

  • f5sirt@f5.com: CWE-193
  • nvd@nist.gov: CWE-193

Primary references