[USN-4967-1] nginx vulnerability
Severity
Medium
Affected Packages
110
CVEs
1
nginx could be made to crash or run programs if it received specially crafted network traffic.
Luis Merino, Markus Vervier, and Eric Sesterhenn discovered that nginx
incorrectly handled responses to the DNS resolver. A remote attacker could
use this issue to cause nginx to crash, resulting in a denial of service,
or possibly execute arbitrary code.
- ID
- USN-4967-1
- Severity
- medium
- URL
- https://ubuntu.com/security/notices/USN-4967-1
- Published
-
2021-05-26T13:50:49
(3 years ago) - Modified
-
2021-05-26T13:50:49
(3 years ago) - Other Advisories
-
- ALAS-2021-1507
- ALPINE:CVE-2021-23017
- ALSA-2021:2259
- ALSA-2021:2290
- ALSA-2022:0323
- ASA-202106-36
- ASA-202106-48
- DSA-4921-1
- ELSA-2021-2259
- ELSA-2021-2290
- ELSA-2022-0323
- FEDORA-2021-393d698493
- FEDORA-2021-b37cffac0d
- FREEBSD:0882F019-BD60-11EB-9BDD-8C164567CA3C
- GLSA-202105-38
- MS:CVE-2021-23017
- NGINX:CVE-2021-23017
- openSUSE-SU-2021:0835-1
- openSUSE-SU-2021:1815-1
- RHSA-2021:2259
- RHSA-2021:2290
- RHSA-2022:0323
- RLSA-2021:2259
- RLSA-2021:2290
- RLSA-2022:0323
- SUSE-SU-2021:1792-1
- SUSE-SU-2021:1814-1
- SUSE-SU-2021:1815-1
- SUSE-SU-2021:1839-1
- USN-4967-2
Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
---|---|---|---|---|---|---|---|
Affected | pkg:deb/ubuntu/nginx?distro=hirsute | ubuntu | nginx | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/nginx?distro=groovy | ubuntu | nginx | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/nginx?distro=focal | ubuntu | nginx | < 1.18.0-0ubuntu1.2 | focal | ||
Affected | pkg:deb/ubuntu/nginx?distro=bionic | ubuntu | nginx | < 1.14.0-0ubuntu1.9 | bionic | ||
Affected | pkg:deb/ubuntu/nginx-light?distro=hirsute | ubuntu | nginx-light | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/nginx-light?distro=groovy | ubuntu | nginx-light | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/nginx-light?distro=focal | ubuntu | nginx-light | < 1.18.0-0ubuntu1.2 | focal | ||
Affected | pkg:deb/ubuntu/nginx-light?distro=bionic | ubuntu | nginx-light | < 1.14.0-0ubuntu1.9 | bionic | ||
Affected | pkg:deb/ubuntu/nginx-full?distro=hirsute | ubuntu | nginx-full | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/nginx-full?distro=groovy | ubuntu | nginx-full | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/nginx-full?distro=focal | ubuntu | nginx-full | < 1.18.0-0ubuntu1.2 | focal | ||
Affected | pkg:deb/ubuntu/nginx-full?distro=bionic | ubuntu | nginx-full | < 1.14.0-0ubuntu1.9 | bionic | ||
Affected | pkg:deb/ubuntu/nginx-extras?distro=hirsute | ubuntu | nginx-extras | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/nginx-extras?distro=groovy | ubuntu | nginx-extras | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/nginx-extras?distro=focal | ubuntu | nginx-extras | < 1.18.0-0ubuntu1.2 | focal | ||
Affected | pkg:deb/ubuntu/nginx-extras?distro=bionic | ubuntu | nginx-extras | < 1.14.0-0ubuntu1.9 | bionic | ||
Affected | pkg:deb/ubuntu/nginx-doc?distro=hirsute | ubuntu | nginx-doc | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/nginx-doc?distro=groovy | ubuntu | nginx-doc | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/nginx-doc?distro=focal | ubuntu | nginx-doc | < 1.18.0-0ubuntu1.2 | focal | ||
Affected | pkg:deb/ubuntu/nginx-doc?distro=bionic | ubuntu | nginx-doc | < 1.14.0-0ubuntu1.9 | bionic | ||
Affected | pkg:deb/ubuntu/nginx-core?distro=hirsute | ubuntu | nginx-core | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/nginx-core?distro=groovy | ubuntu | nginx-core | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/nginx-core?distro=focal | ubuntu | nginx-core | < 1.18.0-0ubuntu1.2 | focal | ||
Affected | pkg:deb/ubuntu/nginx-core?distro=bionic | ubuntu | nginx-core | < 1.14.0-0ubuntu1.9 | bionic | ||
Affected | pkg:deb/ubuntu/nginx-common?distro=hirsute | ubuntu | nginx-common | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/nginx-common?distro=groovy | ubuntu | nginx-common | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/nginx-common?distro=focal | ubuntu | nginx-common | < 1.18.0-0ubuntu1.2 | focal | ||
Affected | pkg:deb/ubuntu/nginx-common?distro=bionic | ubuntu | nginx-common | < 1.14.0-0ubuntu1.9 | bionic | ||
Affected | pkg:deb/ubuntu/libnginx-mod-stream?distro=hirsute | ubuntu | libnginx-mod-stream | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/libnginx-mod-stream?distro=groovy | ubuntu | libnginx-mod-stream | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/libnginx-mod-stream?distro=focal | ubuntu | libnginx-mod-stream | < 1.18.0-0ubuntu1.2 | focal | ||
Affected | pkg:deb/ubuntu/libnginx-mod-stream?distro=bionic | ubuntu | libnginx-mod-stream | < 1.14.0-0ubuntu1.9 | bionic | ||
Affected | pkg:deb/ubuntu/libnginx-mod-stream-geoip?distro=hirsute | ubuntu | libnginx-mod-stream-geoip | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/libnginx-mod-stream-geoip?distro=groovy | ubuntu | libnginx-mod-stream-geoip | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/libnginx-mod-stream-geoip2?distro=hirsute | ubuntu | libnginx-mod-stream-geoip2 | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/libnginx-mod-stream-geoip2?distro=groovy | ubuntu | libnginx-mod-stream-geoip2 | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/libnginx-mod-rtmp?distro=hirsute | ubuntu | libnginx-mod-rtmp | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/libnginx-mod-rtmp?distro=groovy | ubuntu | libnginx-mod-rtmp | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/libnginx-mod-rtmp?distro=focal | ubuntu | libnginx-mod-rtmp | < 1.18.0-0ubuntu1.2 | focal | ||
Affected | pkg:deb/ubuntu/libnginx-mod-rtmp?distro=bionic | ubuntu | libnginx-mod-rtmp | < 1.14.0-0ubuntu1.9 | bionic | ||
Affected | pkg:deb/ubuntu/libnginx-mod-nchan?distro=hirsute | ubuntu | libnginx-mod-nchan | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/libnginx-mod-nchan?distro=groovy | ubuntu | libnginx-mod-nchan | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/libnginx-mod-nchan?distro=focal | ubuntu | libnginx-mod-nchan | < 1.18.0-0ubuntu1.2 | focal | ||
Affected | pkg:deb/ubuntu/libnginx-mod-nchan?distro=bionic | ubuntu | libnginx-mod-nchan | < 1.14.0-0ubuntu1.9 | bionic | ||
Affected | pkg:deb/ubuntu/libnginx-mod-mail?distro=hirsute | ubuntu | libnginx-mod-mail | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/libnginx-mod-mail?distro=groovy | ubuntu | libnginx-mod-mail | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/libnginx-mod-mail?distro=focal | ubuntu | libnginx-mod-mail | < 1.18.0-0ubuntu1.2 | focal | ||
Affected | pkg:deb/ubuntu/libnginx-mod-mail?distro=bionic | ubuntu | libnginx-mod-mail | < 1.14.0-0ubuntu1.9 | bionic | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-xslt-filter?distro=hirsute | ubuntu | libnginx-mod-http-xslt-filter | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-xslt-filter?distro=groovy | ubuntu | libnginx-mod-http-xslt-filter | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-xslt-filter?distro=focal | ubuntu | libnginx-mod-http-xslt-filter | < 1.18.0-0ubuntu1.2 | focal | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-xslt-filter?distro=bionic | ubuntu | libnginx-mod-http-xslt-filter | < 1.14.0-0ubuntu1.9 | bionic | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-upstream-fair?distro=hirsute | ubuntu | libnginx-mod-http-upstream-fair | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-upstream-fair?distro=groovy | ubuntu | libnginx-mod-http-upstream-fair | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-upstream-fair?distro=focal | ubuntu | libnginx-mod-http-upstream-fair | < 1.18.0-0ubuntu1.2 | focal | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-upstream-fair?distro=bionic | ubuntu | libnginx-mod-http-upstream-fair | < 1.14.0-0ubuntu1.9 | bionic | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-uploadprogress?distro=hirsute | ubuntu | libnginx-mod-http-uploadprogress | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-uploadprogress?distro=groovy | ubuntu | libnginx-mod-http-uploadprogress | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-uploadprogress?distro=focal | ubuntu | libnginx-mod-http-uploadprogress | < 1.18.0-0ubuntu1.2 | focal | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-uploadprogress?distro=bionic | ubuntu | libnginx-mod-http-uploadprogress | < 1.14.0-0ubuntu1.9 | bionic | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-subs-filter?distro=hirsute | ubuntu | libnginx-mod-http-subs-filter | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-subs-filter?distro=groovy | ubuntu | libnginx-mod-http-subs-filter | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-subs-filter?distro=focal | ubuntu | libnginx-mod-http-subs-filter | < 1.18.0-0ubuntu1.2 | focal | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-subs-filter?distro=bionic | ubuntu | libnginx-mod-http-subs-filter | < 1.14.0-0ubuntu1.9 | bionic | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-perl?distro=hirsute | ubuntu | libnginx-mod-http-perl | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-perl?distro=groovy | ubuntu | libnginx-mod-http-perl | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-perl?distro=focal | ubuntu | libnginx-mod-http-perl | < 1.18.0-0ubuntu1.2 | focal | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-perl?distro=bionic | ubuntu | libnginx-mod-http-perl | < 1.14.0-0ubuntu1.9 | bionic | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-ndk?distro=hirsute | ubuntu | libnginx-mod-http-ndk | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-ndk?distro=groovy | ubuntu | libnginx-mod-http-ndk | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-ndk?distro=focal | ubuntu | libnginx-mod-http-ndk | < 1.18.0-0ubuntu1.2 | focal | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-ndk?distro=bionic | ubuntu | libnginx-mod-http-ndk | < 1.14.0-0ubuntu1.9 | bionic | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-lua?distro=groovy | ubuntu | libnginx-mod-http-lua | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-lua?distro=focal | ubuntu | libnginx-mod-http-lua | < 1.18.0-0ubuntu1.2 | focal | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-lua?distro=bionic | ubuntu | libnginx-mod-http-lua | < 1.14.0-0ubuntu1.9 | bionic | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-image-filter?distro=hirsute | ubuntu | libnginx-mod-http-image-filter | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-image-filter?distro=groovy | ubuntu | libnginx-mod-http-image-filter | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-image-filter?distro=focal | ubuntu | libnginx-mod-http-image-filter | < 1.18.0-0ubuntu1.2 | focal | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-image-filter?distro=bionic | ubuntu | libnginx-mod-http-image-filter | < 1.14.0-0ubuntu1.9 | bionic | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-headers-more-filter?distro=hirsute | ubuntu | libnginx-mod-http-headers-more-filter | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-headers-more-filter?distro=groovy | ubuntu | libnginx-mod-http-headers-more-filter | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-headers-more-filter?distro=focal | ubuntu | libnginx-mod-http-headers-more-filter | < 1.18.0-0ubuntu1.2 | focal | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-headers-more-filter?distro=bionic | ubuntu | libnginx-mod-http-headers-more-filter | < 1.14.0-0ubuntu1.9 | bionic | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-geoip?distro=hirsute | ubuntu | libnginx-mod-http-geoip | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-geoip?distro=groovy | ubuntu | libnginx-mod-http-geoip | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-geoip?distro=focal | ubuntu | libnginx-mod-http-geoip | < 1.18.0-0ubuntu1.2 | focal | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-geoip?distro=bionic | ubuntu | libnginx-mod-http-geoip | < 1.14.0-0ubuntu1.9 | bionic | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-geoip2?distro=hirsute | ubuntu | libnginx-mod-http-geoip2 | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-geoip2?distro=groovy | ubuntu | libnginx-mod-http-geoip2 | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-geoip2?distro=focal | ubuntu | libnginx-mod-http-geoip2 | < 1.18.0-0ubuntu1.2 | focal | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-fancyindex?distro=hirsute | ubuntu | libnginx-mod-http-fancyindex | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-fancyindex?distro=groovy | ubuntu | libnginx-mod-http-fancyindex | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-fancyindex?distro=focal | ubuntu | libnginx-mod-http-fancyindex | < 1.18.0-0ubuntu1.2 | focal | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-fancyindex?distro=bionic | ubuntu | libnginx-mod-http-fancyindex | < 1.14.0-0ubuntu1.9 | bionic | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-echo?distro=hirsute | ubuntu | libnginx-mod-http-echo | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-echo?distro=groovy | ubuntu | libnginx-mod-http-echo | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-echo?distro=focal | ubuntu | libnginx-mod-http-echo | < 1.18.0-0ubuntu1.2 | focal | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-echo?distro=bionic | ubuntu | libnginx-mod-http-echo | < 1.14.0-0ubuntu1.9 | bionic | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-dav-ext?distro=hirsute | ubuntu | libnginx-mod-http-dav-ext | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-dav-ext?distro=groovy | ubuntu | libnginx-mod-http-dav-ext | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-dav-ext?distro=focal | ubuntu | libnginx-mod-http-dav-ext | < 1.18.0-0ubuntu1.2 | focal | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-dav-ext?distro=bionic | ubuntu | libnginx-mod-http-dav-ext | < 1.14.0-0ubuntu1.9 | bionic | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-cache-purge?distro=hirsute | ubuntu | libnginx-mod-http-cache-purge | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-cache-purge?distro=groovy | ubuntu | libnginx-mod-http-cache-purge | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-cache-purge?distro=focal | ubuntu | libnginx-mod-http-cache-purge | < 1.18.0-0ubuntu1.2 | focal | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-cache-purge?distro=bionic | ubuntu | libnginx-mod-http-cache-purge | < 1.14.0-0ubuntu1.9 | bionic | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-auth-pam?distro=hirsute | ubuntu | libnginx-mod-http-auth-pam | < 1.18.0-6ubuntu8.2 | hirsute | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-auth-pam?distro=groovy | ubuntu | libnginx-mod-http-auth-pam | < 1.18.0-6ubuntu2.2 | groovy | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-auth-pam?distro=focal | ubuntu | libnginx-mod-http-auth-pam | < 1.18.0-0ubuntu1.2 | focal | ||
Affected | pkg:deb/ubuntu/libnginx-mod-http-auth-pam?distro=bionic | ubuntu | libnginx-mod-http-auth-pam | < 1.14.0-0ubuntu1.9 | bionic |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |