The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2290 advisory.

  - nginx: Off-by-one in ngx_resolver_copy() when labels are followed by a pointer to a root domain name     (CVE-2021-23017)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the nginx packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A security issue in nginx resolver was identified,     which might allow an attacker who is able to forge UDP     packets from the DNS server to cause 1-byte memory     overwrite, resulting in worker process crash or     potential other impact.(CVE-2021-23017)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the nginx package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A security issue in nginx resolver was identified,     which might allow an attacker who is able to forge UDP     packets from the DNS server to cause 1-byte memory     overwrite, resulting in worker process crash or     potential other impact.(CVE-2021-23017)

  - NGINX before 1.13.6 has a buffer overflow for years     that exceed four digits, as demonstrated by a file with     a modification date in 1969 that causes an integer     overflow (or a false modification date far in the     future), when encountered by the autoindex     module.(CVE-2017-20005)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the nginx package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file     with a modification date in 1969 that causes an integer overflow (or a false modification date far in the     future), when encountered by the autoindex module. (CVE-2017-20005)

  - ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing     different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A     MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one     subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-     protocol attacks may be possible where the behavior of one protocol service may compromise the other at     the application layer. (CVE-2021-3618)

  - A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP     packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or     potential other impact. (CVE-2021-23017)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-202105-38 (nginx: Remote code execution)

    It was discovered that nginx did not properly handle DNS responses when       &ldquo;resolver&rdquo; directive is used.
  Impact :

    A remote attacker, able to provide DNS responses to a nginx instance,       could cause the execution of arbitrary code with the privileges of the       process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-0323 advisory.

  - A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP     packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or     potential other impact. (CVE-2021-23017)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - nginx: Off-by-one in ngx_resolver_copy() when labels are followed by a pointer to a root domain name     (CVE-2021-23017)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

Luis Merino、Markus Vervier 和 Eric Sesterhenn 在 Nginx (一種高效能 Web 和反向代理伺服器) 中發現差一錯誤，可導致拒絕服務，並可能造成任意程式碼執行攻擊。

針對 Debian 9 Stretch，已在 1.10.3-1+deb9u6 版本中修正此問題。

建議您升級 nginx 套件。

如需有關 nginx 安全性狀態的詳細資訊，請參閱其安全追蹤頁面： https://security-tracker.debian.org/tracker/nginx

注意：Tenable Network Security 已直接從 DLA 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

遠端 Oracle Linux 8 主機上安裝的套件受到 ELSA-2021-2259 公告中提及的一個弱點影響。

  - 在 nginx 解析器中發現一項安全性問題，可能會讓從 DNS 伺服器偽造 UDP 封包的攻擊者，得以利用此缺陷造成 1 個位元組記憶體覆寫，進而導致背景工作處理程序損毀或引發其他潛在影響。(CVE-2021-23017)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

遠端 Redhat Enterprise Linux 7 主機上安裝的套件受到 RHSA-2021：2278 公告中提及的一個弱點影響。

  - nginx：在標籤後跟 root 網域名稱的指標時，ngx_resolver_copy() 中會發生差一錯誤 (CVE-2021-23017)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

遠端 Redhat Enterprise Linux 7 主機上安裝的套件受到 RHSA-2021：2258 公告中提及的一個弱點影響。

  - nginx：在標籤後跟 root 網域名稱的指標時，ngx_resolver_copy() 中會發生差一錯誤 (CVE-2021-23017)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

遠端 CentOS Linux 8 主機上安裝的套件受到 CESA-2021: 2290 公告中提及的一個弱點影響。

  - nginx：在標籤後跟 root 網域名稱的指標時，ngx_resolver_copy() 中會發生差一錯誤 (CVE-2021-23017)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

遠端主機受到 GLSA-202105-38 中所述的弱點影響 (nginx：遠端程式碼執行)

    據發現，使用「解析器」指示詞時，nginx 未正確處理 DNS 回應。
  影響：

    能夠為 nginx 執行個體提供 DNS 響應的遠端攻擊者可能以處理程序的權限執行任意程式碼，或造成拒絕服務情形。
  因應措施：

    目前尚無已知的因應措施。

遠端 Oracle Linux 8 主機上安裝的套件受到 ELSA-2022-0323 公告中提及的一個弱點影響。

  - 在 nginx 解析器中發現一項安全性問題，可能會讓從 DNS 伺服器偽造 UDP 封包的攻擊者，得以利用此缺陷造成 1 個位元組記憶體覆寫，進而導致背景工作處理程序損毀或引發其他潛在影響。(CVE-2021-23017)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

ID	名稱	產品	系列	已發布	已更新	嚴重性
150833	CentOS 8 : nginx:1.16 (CESA-2021:2290)	Nessus	CentOS Local Security Checks	2021/6/16	2023/3/23	high
152409	EulerOS 2.0 SP8 : nginx (EulerOS-SA-2021-2308)	Nessus	Huawei Local Security Checks	2021/8/10	2023/3/23	high
153261	EulerOS 2.0 SP2 : nginx (EulerOS-SA-2021-2412)	Nessus	Huawei Local Security Checks	2021/9/14	2023/12/1	critical
154391	EulerOS 2.0 SP3 : nginx (EulerOS-SA-2021-2599)	Nessus	Huawei Local Security Checks	2021/10/25	2022/3/28	critical
156987	GLSA-202105-38 : nginx: Remote code execution	Nessus	Gentoo Local Security Checks	2022/1/24	2022/9/21	high
157275	Oracle Linux 8 : nginx:1.20 (ELSA-2022-0323)	Nessus	Oracle Linux Local Security Checks	2022/2/1	2023/3/23	high
199850	RHEL 8 : 1.14_nginx (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/7/11	high
150097	Debian DLA-2670-1：nginx 安全性更新	Nessus	Debian Local Security Checks	2021/6/1	2022/9/21	high
150349	Oracle Linux 8：nginx：1.18 (ELSA-2021-2259)	Nessus	Oracle Linux Local Security Checks	2021/6/8	2023/3/23	high
150785	RHEL 7：rh-nginx116-nginx (RHSA-2021: 2278)	Nessus	Red Hat Local Security Checks	2021/6/15	2024/4/28	high
150786	RHEL 7：rh-nginx118-nginx (RHSA-2021: 2258)	Nessus	Red Hat Local Security Checks	2021/6/15	2024/4/28	high
150833	CentOS 8：nginx：1.16 (CESA-2021: 2290)	Nessus	CentOS Local Security Checks	2021/6/16	2023/3/23	high
156987	GLSA-202105-38：nginx：遠端程式碼執行	Nessus	Gentoo Local Security Checks	2022/1/24	2022/9/21	high
157275	Oracle Linux 8：nginx：1.20 (ELSA-2022-0323)	Nessus	Oracle Linux Local Security Checks	2022/2/1	2023/3/23	high

偵測

搜尋 Plugin

high

high

critical

critical

high

high

high

high

high

high

high

high

high

high