Red Hat Security Advisory

RHSA-2022:0323

nginx:1.20 security update

Released 2022-01-31 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) nginx-1:1.20.1-1.module+el8.5.0+13723+ab304644.aarch64::nginx:1.20, nginx-1:1.20.1-1.module+el8.5.0+13723+ab304644.ppc64le::nginx:1.20, nginx-1:1.20.1-1.module+el8.5.0+13723+ab304644.s390x::nginx:1.20 +24

Fixes 1 record

TI-2021-05876 CVE-2021-23017 · GHSA-83p9-mcpm-374v

A security issue in nginx resolver was identified, which might allow an attacker who is…

HIGH 66

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other…

CVSS 3.1HIGH 7.7 Network No auth No interaction EPSS 0.53461 Published 2021-06-01 Partial fix CWE-193