Nginx Resolver Vulnerability: UDP Packet Forgery Leading to Memory Overwrite

CVE-2021-23017 · HIGH Severity

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

Learn more about our Cis Benchmark Audit For Nginx.