cve/2021/CVE-2021-23017.md

CVE-2021-23017

Description

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

POC

Reference

• http://packetstormsecurity.com/files/167720/Nginx-1.20.0-Denial-Of-Service.html
• https://www.oracle.com/security-alerts/cpuapr2022.html
• https://www.oracle.com/security-alerts/cpujan2022.html
• https://www.oracle.com/security-alerts/cpuoct2021.html

Github

• https://github.com/631068264/multi-cluster-ingress-nginx
• https://github.com/ANJITH01/Nginx-Ingress-HELM
• https://github.com/ARPSyndicate/cvemon
• https://github.com/Aswinisurya99/ingress-ngininx
• https://github.com/Bacon-Unlimited/security-patches
• https://github.com/Hopecount123/ingress-controller-update
• https://github.com/Logeswark/helmpackage
• https://github.com/M507/CVE-2021-23017-PoC
• https://github.com/M507/M507
• https://github.com/MrE-Fog/ingress-nginxx
• https://github.com/NaInSec/CVE-PoC-in-GitHub
• https://github.com/ReturnRei/Snort_poc
• https://github.com/SYRTI/POC_to_review
• https://github.com/ShivamDey/CVE-2021-23017
• https://github.com/StuartDickenson/ingress-nginx
• https://github.com/WhooAmii/POC_to_review
• https://github.com/adityamillind98/ngins
• https://github.com/adityamillind98/nginx
• https://github.com/bollwarm/SecToolSet
• https://github.com/caojian12345/ingress-nginx
• https://github.com/carayev/kubernetes-nginx-ingress
• https://github.com/doudou147/ingress-nginx
• https://github.com/eggkingo/polyblog
• https://github.com/gmk-git/Kubernetes-Ingress
• https://github.com/k0mi-tg/CVE-POC
• https://github.com/kartikeyaexpd/ingress-nginx
• https://github.com/kubernetes/ingress-nginx
• https://github.com/lakshit1212/CVE-2021-23017-PoC
• https://github.com/lemonhope-mz/replica_kubernetes-nginx
• https://github.com/luyuehm/ingress-nginx
• https://github.com/maksonlee/ingress-nginx
• https://github.com/manas3c/CVE-POC
• https://github.com/msyhu/ingress-nginx
• https://github.com/niandy/nginx-patch
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/rmtec/modeswitcher
• https://github.com/rohankumardubey/ingress-nginx
• https://github.com/ryanarabety/ingress-nginx-Kubernetes
• https://github.com/shaundaley39/ingress-nginx
• https://github.com/shoebece/nginx-ingress
• https://github.com/soosmile/POC
• https://github.com/teresaweber685/book_list
• https://github.com/trhacknon/Pocingit
• https://github.com/vshaliii/DC-4-Vulnhub-Walkthrough
• https://github.com/wallarm/ingress
• https://github.com/whoforget/CVE-POC
• https://github.com/youwizard/CVE-POC
• https://github.com/zecool/cve
• https://github.com/zlz4642/ingress-nginx