Red Hat Security AdvisoryRHSA-2021:2290
nginx:1.16 security update
Released 2021-06-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) nginx-1:1.16.1-2.module+el8.4.0+11155+68135136.1.aarch64::nginx:1.16, nginx-1:1.16.1-2.module+el8.4.0+11155+68135136.1.ppc64le::nginx:1.16, nginx-1:1.16.1-2.module+el8.4.0+11155+68135136.1.s390x::nginx:1.16 +24
- Red Hat Enterprise Linux AppStream EUS (v. 8.1) nginx-1:1.16.1-1.module+el8.1.0+11153+6c3a40a9.1.aarch64::nginx:1.16, nginx-1:1.16.1-1.module+el8.1.0+11153+6c3a40a9.1.ppc64le::nginx:1.16, nginx-1:1.16.1-1.module+el8.1.0+11153+6c3a40a9.1.s390x::nginx:1.16 +24
- Red Hat Enterprise Linux AppStream EUS (v. 8.2) nginx-1:1.16.1-1.module+el8.2.0+11154+636e4c3b.1.aarch64::nginx:1.16, nginx-1:1.16.1-1.module+el8.2.0+11154+636e4c3b.1.ppc64le::nginx:1.16, nginx-1:1.16.1-1.module+el8.2.0+11154+636e4c3b.1.s390x::nginx:1.16 +24
Fixes 1 record
Priority HIGH 66
A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other…
CVSS 3.1HIGH 7.7· Network · No auth · No interaction · EPSS 0.53461 · Published 2021-06-01 · Partial fix CWE-193
