DNS: Nginx DNS Resolver Buffer Overflow

This signature detects attempts to exploit a known vulnerability against Nginx DNS Resolver. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.

Extended Description

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

Affected Products

Oracle blockchain_platform

References

CVE: CVE-2021-23017

URL: http://mailman.nginx.org/pipermail/nginx-announce/2021/000300.html

Short Name

DNS:OVERFLOW:NGINX-DNS-RES-BOF

Severity

Major

Recommended

False

Recommended Action

Drop

DNS: Nginx DNS Resolver Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?