A vulnerability has been found in Oracle Communications Control Plane Monitor 3.4/4.2/4.3/4.4 and classified as very critical. This vulnerability affects unknown code of the component nginx. The manipulation leads to off-by-one.
This vulnerability was named CVE-2021-23017. The attack can be initiated remotely. Furthermore, there is an exploit available.
It is recommended to upgrade the affected component.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2021-23017 | Oracle Communications Control Plane Monitor 3.4/4.2/4.3/4.4 nginx off-by-one (EDB-50973)
A vulnerability has been found in Oracle Communications Control Plane Monitor 3.4/4.2/4.3/4.4 and classified as very critical. This vulnerability affects…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
BSI-Warnung (Deutschland)CVE-2021-23017
Juniper Junos Space: Mehrere Schwachstellen13.07.2022NGINX: Schwachstelle ermöglicht Denial of Service25.05.2021
Advisory Radar
Offizielles Hersteller-Update verfügbar
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Hersteller hat ein verifiziertes Patch-Release herausgegeben. Sofortiges Rollout auf Test- und Produktivsystemen empfohlen.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
-
F5 Security Advisory Verifiziertf5.com
-
Web Referencemailman.nginx.org
-
Apache Security Advisory Verifiziertapache.org
-
Apache Security Advisory Verifiziertapache.org
-
Apache Security Advisory Verifiziertapache.org