Summary
Luis Merino, Markus Vervier, and Eric Sesterhenn discovered that nginx
incorrectly handled responses to the DNS resolver. A remote attacker could
use this issue to cause nginx to crash, resulting in a denial of service,
or possibly execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | nginx | 1.14.0-0ubuntu1.9 |
| Ubuntu · 20.04 LTS 20.04:LTS | nginx | 1.18.0-0ubuntu1.2 |
Vulnerabilities 1
-
Unscored —
A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from …
References
-
report
https://ubuntu.com/security/CVE-2021-23017