nginx: 1-byte memory overwrite vulnerability in DNS resolver (CVE-2021-23017)

Re:nginx: 1-byte memory overwrite vulnerability in DNS resol... by superkuh on Tuesday May 25, 2021 @06:53PM (#27283802)

The patch described on the vulnerability page worked 1-to-1 for in two nginx versions I fixed. But in nginx 1.20 in ./src/core/ngx_resolver.c the second replacement does not match the existing if (len == -1){contents} and I had to remove some extra bits based on what seemed right it manually.

[ Parent | on HN ]

Re:nginx: 1-byte memory overwrite vulnerability in DNS resol... by luismerino on Wednesday May 26, 2021 @03:47AM (#27287591)

You might want to go with the official fix: https://nginx.org/download/patch.2021.resolver.txt

[ Parent | on HN ]

Re:nginx: 1-byte memory overwrite vulnerability in DNS resol... by superkuh on Wednesday May 26, 2021 @08:10PM (#27297766)

Thanks! I'll recompile with that now that it is out.

[ Parent | on HN ]

Re:nginx: 1-byte memory overwrite vulnerability in DNS resol... by artifact_44 on Tuesday May 25, 2021 @07:10PM (#27283962)

Uh. That sounds.. kinda bad in the context of something like.... DNS.

[ Parent | on HN ]