Vulnerabilities > CVE-2021-23017 - Off-by-one Error vulnerability in multiple products

CVSS 7.7 - HIGH

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

LOW

network

high complexity

NVD

Published: 2021-06-01

Updated: 2023-11-07

Summary

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

Vulnerable Configurations

Part	Description	Count
Application	F5 F5 Nginx 0.6.18 F5 Nginx 0.6.19 F5 Nginx 0.6.20 F5 Nginx 0.6.21 F5 Nginx 0.6.22 F5 Nginx 0.6.23 F5 Nginx 0.6.24 F5 Nginx 0.6.25 F5 Nginx 0.6.26 F5 Nginx 0.6.27 F5 Nginx 0.6.28 F5 Nginx 0.6.29 F5 Nginx 0.6.30 F5 Nginx 0.6.31 F5 Nginx 0.6.32 F5 Nginx 0.6.33 F5 Nginx 0.6.34 F5 Nginx 0.6.35 F5 Nginx 0.6.36 F5 Nginx 0.6.37 F5 Nginx 0.6.38 F5 Nginx 0.6.39 F5 Nginx 0.7.0 F5 Nginx 0.7.1 F5 Nginx 0.7.2 F5 Nginx 0.7.3 F5 Nginx 0.7.4 F5 Nginx 0.7.5 F5 Nginx 0.7.6 F5 Nginx 0.7.7 F5 Nginx 0.7.8 F5 Nginx 0.7.9 F5 Nginx 0.7.10 F5 Nginx 0.7.11 F5 Nginx 0.7.12 F5 Nginx 0.7.13 F5 Nginx 0.7.14 F5 Nginx 0.7.15 F5 Nginx 0.7.16 F5 Nginx 0.7.17 F5 Nginx 0.7.18 F5 Nginx 0.7.19 F5 Nginx 0.7.20 F5 Nginx 0.7.21 F5 Nginx 0.7.22 F5 Nginx 0.7.23 F5 Nginx 0.7.24 F5 Nginx 0.7.25 F5 Nginx 0.7.26 F5 Nginx 0.7.27 F5 Nginx 0.7.28 F5 Nginx 0.7.29 F5 Nginx 0.7.30 F5 Nginx 0.7.31 F5 Nginx 0.7.32 F5 Nginx 0.7.33 F5 Nginx 0.7.34 F5 Nginx 0.7.35 F5 Nginx 0.7.36 F5 Nginx 0.7.37 F5 Nginx 0.7.38 F5 Nginx 0.7.39 F5 Nginx 0.7.40 F5 Nginx 0.7.41 F5 Nginx 0.7.42 F5 Nginx 0.7.43 F5 Nginx 0.7.44 F5 Nginx 0.7.45 F5 Nginx 0.7.46 F5 Nginx 0.7.47 F5 Nginx 0.7.48 F5 Nginx 0.7.49 F5 Nginx 0.7.50 F5 Nginx 0.7.51 F5 Nginx 0.7.52 F5 Nginx 0.7.53 F5 Nginx 0.7.54 F5 Nginx 0.7.55 F5 Nginx 0.7.56 F5 Nginx 0.7.57 F5 Nginx 0.7.58 F5 Nginx 0.7.59 F5 Nginx 0.7.60 F5 Nginx 0.7.61 F5 Nginx 0.7.62 F5 Nginx 0.7.63 F5 Nginx 0.7.64 F5 Nginx 0.7.65 F5 Nginx 0.7.66 F5 Nginx 0.7.67 F5 Nginx 0.7.68 F5 Nginx 0.7.69 F5 Nginx 0.8.0 F5 Nginx 0.8.1 F5 Nginx 0.8.2 F5 Nginx 0.8.3 F5 Nginx 0.8.4 F5 Nginx 0.8.5 F5 Nginx 0.8.6 F5 Nginx 0.8.7 F5 Nginx 0.8.8 F5 Nginx 0.8.9 F5 Nginx 0.8.10 F5 Nginx 0.8.11 F5 Nginx 0.8.12 F5 Nginx 0.8.13 F5 Nginx 0.8.14 F5 Nginx 0.8.15 F5 Nginx 0.8.16 F5 Nginx 0.8.17 F5 Nginx 0.8.18 F5 Nginx 0.8.19 F5 Nginx 0.8.20 F5 Nginx 0.8.21 F5 Nginx 0.8.22 F5 Nginx 0.8.23 F5 Nginx 0.8.24 F5 Nginx 0.8.25 F5 Nginx 0.8.26 F5 Nginx 0.8.27 F5 Nginx 0.8.28 F5 Nginx 0.8.29 F5 Nginx 0.8.30 F5 Nginx 0.8.31 F5 Nginx 0.8.32 F5 Nginx 0.8.33 F5 Nginx 0.8.34 F5 Nginx 0.8.35 F5 Nginx 0.8.36 F5 Nginx 0.8.37 F5 Nginx 0.8.38 F5 Nginx 0.8.39 F5 Nginx 0.8.40 F5 Nginx 0.8.41 F5 Nginx 0.8.42 F5 Nginx 0.8.43 F5 Nginx 0.8.44 F5 Nginx 0.8.45 F5 Nginx 0.8.46 F5 Nginx 0.8.47 F5 Nginx 0.8.48 F5 Nginx 0.8.49 F5 Nginx 0.8.50 F5 Nginx 0.8.51 F5 Nginx 0.8.52 F5 Nginx 0.8.53 F5 Nginx 0.8.54 F5 Nginx 0.8.55 F5 Nginx 0.9.0 F5 Nginx 0.9.1 F5 Nginx 0.9.2 F5 Nginx 0.9.3 F5 Nginx 0.9.4 F5 Nginx 0.9.5 F5 Nginx 0.9.6 F5 Nginx 0.9.7 F5 Nginx 1.0.0 F5 Nginx 1.0.1 F5 Nginx 1.0.2 F5 Nginx 1.0.3 F5 Nginx 1.0.4 F5 Nginx 1.0.5 F5 Nginx 1.0.6 F5 Nginx 1.0.7 F5 Nginx 1.0.8 F5 Nginx 1.0.9 F5 Nginx 1.0.10 F5 Nginx 1.0.11 F5 Nginx 1.0.12 F5 Nginx 1.0.13 F5 Nginx 1.0.14 F5 Nginx 1.0.15 F5 Nginx 1.1.0 F5 Nginx 1.1.1 F5 Nginx 1.1.2 F5 Nginx 1.1.3 F5 Nginx 1.1.4 F5 Nginx 1.1.5 F5 Nginx 1.1.6 F5 Nginx 1.1.7 F5 Nginx 1.1.8 F5 Nginx 1.1.9 F5 Nginx 1.1.10 F5 Nginx 1.1.11 F5 Nginx 1.1.12 F5 Nginx 1.1.13 F5 Nginx 1.1.14 F5 Nginx 1.1.15 F5 Nginx 1.1.16 F5 Nginx 1.1.17 F5 Nginx 1.1.18 F5 Nginx 1.1.19 F5 Nginx 1.2.0 F5 Nginx 1.2.1 F5 Nginx 1.2.2 F5 Nginx 1.2.3 F5 Nginx 1.2.4 F5 Nginx 1.2.5 F5 Nginx 1.2.6 F5 Nginx 1.2.7 F5 Nginx 1.2.8 F5 Nginx 1.2.9 F5 Nginx 1.3.0 F5 Nginx 1.3.1 F5 Nginx 1.3.2 F5 Nginx 1.3.3 F5 Nginx 1.3.4 F5 Nginx 1.3.5 F5 Nginx 1.3.6 F5 Nginx 1.3.7 F5 Nginx 1.3.8 F5 Nginx 1.3.9 F5 Nginx 1.3.10 F5 Nginx 1.3.11 F5 Nginx 1.3.12 F5 Nginx 1.3.13 F5 Nginx 1.3.14 F5 Nginx 1.3.15 F5 Nginx 1.3.16 F5 Nginx 1.4.0 F5 Nginx 1.4.1 F5 Nginx 1.4.2 F5 Nginx 1.4.3 F5 Nginx 1.4.4 F5 Nginx 1.4.5 F5 Nginx 1.4.6 F5 Nginx 1.4.7 F5 Nginx 1.5.0 F5 Nginx 1.5.1 F5 Nginx 1.5.2 F5 Nginx 1.5.3 F5 Nginx 1.5.4 F5 Nginx 1.5.5 F5 Nginx 1.5.6 F5 Nginx 1.5.7 F5 Nginx 1.5.8 F5 Nginx 1.5.9 F5 Nginx 1.5.10 F5 Nginx 1.5.11 F5 Nginx 1.5.12 F5 Nginx 1.5.13 F5 Nginx 1.6.0 F5 Nginx 1.6.1 F5 Nginx 1.6.2 F5 Nginx 1.6.3 F5 Nginx 1.7.0 F5 Nginx 1.7.4 F5 Nginx 1.7.5 F5 Nginx 1.7.6 F5 Nginx 1.7.7 F5 Nginx 1.7.8 F5 Nginx 1.7.9 F5 Nginx 1.7.10 F5 Nginx 1.7.11 F5 Nginx 1.7.12 F5 Nginx 1.8.0 F5 Nginx 1.8.1 F5 Nginx 1.9.0 F5 Nginx 1.9.1 F5 Nginx 1.9.2 F5 Nginx 1.9.3 F5 Nginx 1.9.4 F5 Nginx 1.9.5 F5 Nginx 1.9.6 F5 Nginx 1.9.7 F5 Nginx 1.9.8 F5 Nginx 1.9.9 F5 Nginx 1.9.10 F5 Nginx 1.9.11 F5 Nginx 1.9.12 F5 Nginx 1.9.13 F5 Nginx 1.9.14 F5 Nginx 1.9.15 F5 Nginx 1.10.0 F5 Nginx 1.10.1 F5 Nginx 1.10.2 F5 Nginx 1.10.3 F5 Nginx 1.11.0 F5 Nginx 1.11.1 F5 Nginx 1.11.2 F5 Nginx 1.11.3 F5 Nginx 1.11.4 F5 Nginx 1.11.5 F5 Nginx 1.11.6 F5 Nginx 1.11.7 F5 Nginx 1.11.8 F5 Nginx 1.11.9 F5 Nginx 1.11.10 F5 Nginx 1.11.11 F5 Nginx 1.11.12 F5 Nginx 1.11.13 F5 Nginx 1.12.0 F5 Nginx 1.12.1 F5 Nginx 1.12.2 F5 Nginx 1.13.0 F5 Nginx 1.13.1 F5 Nginx 1.13.2 F5 Nginx 1.13.3 F5 Nginx 1.13.4 F5 Nginx 1.13.5 F5 Nginx 1.13.6 F5 Nginx 1.13.7 F5 Nginx 1.13.8 F5 Nginx 1.13.9 F5 Nginx 1.13.10 F5 Nginx 1.13.11 F5 Nginx 1.13.12 F5 Nginx 1.14.0 F5 Nginx 1.14.1 F5 Nginx 1.14.2 F5 Nginx 1.15.0 F5 Nginx 1.15.1 F5 Nginx 1.15.2 F5 Nginx 1.15.3 F5 Nginx 1.15.4 F5 Nginx 1.15.5 F5 Nginx 1.15.6 F5 Nginx 1.15.7 F5 Nginx 1.15.8 F5 Nginx 1.15.9 F5 Nginx 1.15.10 F5 Nginx 1.15.11 F5 Nginx 1.15.12 F5 Nginx 1.16.0 F5 Nginx 1.16.1 F5 Nginx 1.17.0 F5 Nginx 1.17.1 F5 Nginx 1.17.2 F5 Nginx 1.17.3 F5 Nginx 1.17.4 F5 Nginx 1.17.5 F5 Nginx 1.17.6 F5 Nginx 1.17.7 F5 Nginx 1.17.8 F5 Nginx 1.17.9 F5 Nginx 1.17.10 F5 Nginx 1.18.0 F5 Nginx 1.19.0 F5 Nginx 1.19.1 F5 Nginx 1.19.2 F5 Nginx 1.19.3 F5 Nginx 1.19.4 F5 Nginx 1.19.5 F5 Nginx 1.19.6 F5 Nginx 1.19.7 F5 Nginx 1.19.8 F5 Nginx 1.19.9 F5 Nginx 1.19.10 F5 Nginx 1.20.0	349
Application	Openresty Openresty Openresty 0.8.54.3 Openresty Openresty 0.8.54.4 Openresty Openresty 0.8.54.5 Openresty Openresty 0.8.54.6 Openresty Openresty 0.8.54.8 Openresty Openresty 0.8.54.9 Openresty Openresty 1.0.4.0 Openresty Openresty 1.0.4.1 Openresty Openresty 1.0.4.2 Openresty Openresty 1.0.5.0 Openresty Openresty 1.0.5.1 Openresty Openresty 1.0.6.3 Openresty Openresty 1.0.6.5 Openresty Openresty 1.0.6.22 Openresty Openresty 1.0.8.1 Openresty Openresty 1.0.8.3 Openresty Openresty 1.0.8.5 Openresty Openresty 1.0.8.7 Openresty Openresty 1.0.8.9 Openresty Openresty 1.0.8.11 Openresty Openresty 1.0.8.13 Openresty Openresty 1.0.8.15 Openresty Openresty 1.0.8.17 Openresty Openresty 1.0.8.19 Openresty Openresty 1.0.8.21 Openresty Openresty 1.0.8.26 Openresty Openresty 1.0.9.1 Openresty Openresty 1.0.9.3 Openresty Openresty 1.0.9.5 Openresty Openresty 1.0.9.7 Openresty Openresty 1.0.9.9 Openresty Openresty 1.0.9.10 Openresty Openresty 1.0.10.1 Openresty Openresty 1.0.10.3 Openresty Openresty 1.0.10.5 Openresty Openresty 1.0.10.7 Openresty Openresty 1.0.10.9 Openresty Openresty 1.0.10.11 Openresty Openresty 1.0.10.13 Openresty Openresty 1.0.10.15 Openresty Openresty 1.0.10.17 Openresty Openresty 1.0.10.19 Openresty Openresty 1.0.10.21 Openresty Openresty 1.0.10.23 Openresty Openresty 1.0.10.24 Openresty Openresty 1.0.10.25 Openresty Openresty 1.0.10.27 Openresty Openresty 1.0.10.29 Openresty Openresty 1.0.10.31 Openresty Openresty 1.0.10.33 Openresty Openresty 1.0.10.35 Openresty Openresty 1.0.10.41 Openresty Openresty 1.0.10.43 Openresty Openresty 1.0.10.44 Openresty Openresty 1.0.10.45 Openresty Openresty 1.0.10.47 Openresty Openresty 1.0.10.48 Openresty Openresty 1.0.11.3 Openresty Openresty 1.0.11.7 Openresty Openresty 1.0.11.9 Openresty Openresty 1.0.11.11 Openresty Openresty 1.0.11.15 Openresty Openresty 1.0.11.17 Openresty Openresty 1.0.11.19 Openresty Openresty 1.0.11.21 Openresty Openresty 1.0.11.23 Openresty Openresty 1.0.11.25 Openresty Openresty 1.0.11.27 Openresty Openresty 1.0.11.28 Openresty Openresty 1.0.15.1 Openresty Openresty 1.0.15.3 Openresty Openresty 1.0.15.5 Openresty Openresty 1.0.15.7 Openresty Openresty 1.0.15.9 Openresty Openresty 1.0.15.10 Openresty Openresty 1.0.15.11 Openresty Openresty 1.1.12.3 Openresty Openresty 1.1.12.4 Openresty Openresty 1.1.12.5 Openresty Openresty 1.1.13.1 Openresty Openresty 1.2.1.1 Openresty Openresty 1.2.1.3 Openresty Openresty 1.2.1.5 Openresty Openresty 1.2.1.7 Openresty Openresty 1.2.1.9 Openresty Openresty 1.2.1.11 Openresty Openresty 1.2.1.13 Openresty Openresty 1.2.1.14 Openresty Openresty 1.2.3.1 Openresty Openresty 1.2.3.3 Openresty Openresty 1.2.3.5 Openresty Openresty 1.2.3.7 Openresty Openresty 1.2.3.8 Openresty Openresty 1.2.4.1 Openresty Openresty 1.2.4.3 Openresty Openresty 1.2.4.5 Openresty Openresty 1.2.4.7 Openresty Openresty 1.2.4.9 Openresty Openresty 1.2.4.11 Openresty Openresty 1.2.4.13 Openresty Openresty 1.2.4.14 Openresty Openresty 1.2.6.1 Openresty Openresty 1.2.6.3 Openresty Openresty 1.2.6.5 Openresty Openresty 1.2.6.6 Openresty Openresty 1.2.7.1 Openresty Openresty 1.2.7.3 Openresty Openresty 1.2.7.5 Openresty Openresty 1.2.7.6 Openresty Openresty 1.2.7.8 Openresty Openresty 1.2.8.1 Openresty Openresty 1.2.8.3 Openresty Openresty 1.2.8.5 Openresty Openresty 1.2.8.6 Openresty Openresty 1.4.1.1 Openresty Openresty 1.4.1.3 Openresty Openresty 1.4.2.1 Openresty Openresty 1.4.2.3 Openresty Openresty 1.4.2.5 Openresty Openresty 1.4.2.7 Openresty Openresty 1.4.2.8 Openresty Openresty 1.4.2.9 Openresty Openresty 1.4.3.1 Openresty Openresty 1.4.3.3 Openresty Openresty 1.4.3.4 Openresty Openresty 1.4.3.6 Openresty Openresty 1.4.3.7 Openresty Openresty 1.4.3.9 Openresty Openresty 1.5.8.1 Openresty Openresty 1.5.11.1 Openresty Openresty 1.5.12.1 Openresty Openresty 1.7.0.1 Openresty Openresty 1.7.2.1 Openresty Openresty 1.7.4.1 Openresty Openresty 1.7.7.1 Openresty Openresty 1.7.7.2 Openresty Openresty 1.7.10.1 Openresty Openresty 1.7.10.2 Openresty Openresty 1.9.3.1 Openresty Openresty 1.9.3.2 Openresty Openresty 1.9.7.1 Openresty Openresty 1.9.7.2 Openresty Openresty 1.9.7.3 Openresty Openresty 1.9.7.4 Openresty Openresty 1.9.7.5 Openresty Openresty 1.9.15.1 Openresty Openresty 1.11.2.1 Openresty Openresty 1.11.2.2 Openresty Openresty 1.11.2.3 Openresty Openresty 1.11.2.4 Openresty Openresty 1.11.2.5 Openresty Openresty 1.13.6.1 Openresty Openresty 1.13.6.2 Openresty Openresty 1.15.8.1 Openresty Openresty 1.15.8.2 Openresty Openresty 1.15.8.3 Openresty Openresty 1.15.8.4 Openresty Openresty 1.17.8.1 Openresty Openresty 1.17.8.2 Openresty Openresty 1.19.3.1	167
Application	Netapp Netapp Ontap Select Deploy Administration Utility -	1
Application	Oracle Oracle Communications Operations Monitor 3.4 Oracle Communications Operations Monitor 4.2 Oracle Communications Operations Monitor 4.3 Oracle Communications Operations Monitor 4.4 Oracle Enterprise Session Border Controller 8.4 Oracle Enterprise Session Border Controller 9.0 Oracle Communications Session Border Controller 8.4 Oracle Communications Session Border Controller 9.0 Oracle Enterprise Communications Broker 3.3.0 Oracle Enterprise Telephony Fraud Monitor 4.2 Oracle Enterprise Telephony Fraud Monitor 4.3 Oracle Enterprise Telephony Fraud Monitor 4.4 Oracle Enterprise Telephony Fraud Monitor 3.4 Oracle Communications Fraud Monitor 3.4 Oracle Communications Fraud Monitor 4.4 Oracle Communications Control Plane Monitor 4.2 Oracle Communications Control Plane Monitor 4.3 Oracle Communications Control Plane Monitor 4.4 Oracle Communications Control Plane Monitor 3.4 Oracle Goldengate - Oracle Goldengate 11.2 Oracle Goldengate 12.1.2 Oracle Goldengate 12.1.2.1.0 Oracle Goldengate 12.2.0.1 Oracle Goldengate 12.2.0.2.0 Oracle Goldengate 12.3.0 Oracle Goldengate 12.3.0.1.0 Oracle Goldengate 12.3.0.1.2 Oracle Goldengate 12.3.0.1.6 Oracle Goldengate 12.3.2.1 Oracle Goldengate 12.3.2.1.1 Oracle Goldengate 18.1.0.0.0 Oracle Goldengate 18.1.0.0.1 Oracle Goldengate 19.1.0.0.0 Oracle Goldengate 19.1.0.0.0.210420 Oracle Goldengate 19.1.0.0.1 Oracle Goldengate 19.1.0.0.2 Oracle Goldengate 19.1.0.0.3 Oracle Goldengate 19.1.0.0.4 Oracle Goldengate 19.1.0.0.220719 Oracle Goldengate 21.1.0 Oracle Blockchain Platform - Oracle Blockchain Platform 21.1.2	43
OS	Fedoraproject Fedoraproject Fedora 33 Fedoraproject Fedora 34	2

Common Weakness Enumeration (CWE)

CWE-193 - Off-by-one Error

Related news

Juniper Releases Patches for Critical Flaws in Junos OS and Contrail Networking (source)

References

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.