CVE-2021-23017: NGINX Resolver Vulnerability

Product/Component

Brocade Fabric OS

2 more products

Notification Id

21214

Last Updated

08 November 2022

Initial Publication Date

08 November 2022

Status

Closed

Severity

Medium

CVSS Base Score

7.7 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

WorkAround

Affected CVE

CVE-2021-23017

Summary

Security Advisory ID : BSA-2021-1516

Component : NGINX

Revision : 1.0

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

Products Affected.

Brocade SANnav - Fixed in Brocade SANnav 2.2.1

Products Confirmed Not Affected.

Brocade Fabric OS.
Brocade ASC Gateway(ASC-G)

Revision History

Version	Change	Date
1.0	Initial Publication	Nov 8, 2022