rpm package
suse/nginx&distro=SUSE Linux Enterprise Module for Server Applications 15 SP3
pkg:rpm/suse/nginx&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP3
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-3618 | — | < 1.19.8-150300.3.9.1 | 1.19.8-150300.3.9.1 | Mar 23, 2022 | ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can re | ||
| CVE-2021-23017 | — | < 1.19.8-3.3.1 | 1.19.8-3.3.1 | Jun 1, 2021 | A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact. |
- CVE-2021-3618Mar 23, 2022affected < 1.19.8-150300.3.9.1fixed 1.19.8-150300.3.9.1
ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can re
- CVE-2021-23017Jun 1, 2021affected < 1.19.8-3.3.1fixed 1.19.8-3.3.1
A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.