ALPINE-CVE-2021-23017 — Vulnetix

Try Vulnetix Request Demo

ALPINE-CVE-2021-23017 PUBLISHED CVSS 7.699999809265137 HIGH

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

Risk Scores

CVSS v3.1

7.699999809265137

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

Affected Products

Vendor	Product	Versions
Alpine:v3.23	nginx	1.0.5-r0, 1.10.0-r0, 1.10.1-r0
Alpine:v3.13	nginx	1.6.2-r0, 1.9.14-r1, 1.9.14-r0
Alpine:v3.20	nginx	1.2.2-r0, 1.9.14-r1, 1.9.14-r0
Alpine:v3.16	nginx	1.8.1-r1, 1.9.11-r0, 1.9.14-r0
Alpine:v3.10	nginx	1.6.3-r0, 1.9.14-r1, 1.9.14-r0
Alpine:v3.17	nginx	1.16.1-r1, 1.16.1-r3, 1.16.1-r4
Alpine:v3.19	nginx	1.16.1-r0, 1.16.1-r1, 1.16.1-r2
Alpine:v3.12	nginx	1.4.4-r2, 0, 0.8.53-r0
Alpine:v3.11	nginx	1.10.2-r1, 0.8.53-r0, 0.8.54-r0
Alpine:v3.15	nginx	1.8.1-r0, 1.8.0-r3, 1.8.0-r2
Alpine:v3.18	nginx	1.4.0-r1, 1.9.14-r1, 0
Alpine:v3.14	nginx	1.9.14-r1, 1.9.14-r0, 1.9.11-r0
Alpine:v3.22	nginx	1.16.1-r5, 0, 0.8.53-r0
Alpine:v3.21	nginx	0, 1.9.14-r1, 1.9.14-r0

Timeline

Jun 1, 2021 CVE Published
Dec 3, 2025 CVE Updated
Apr 30, 2026 Distribution Patch

References

https://security.alpinelinux.org/vuln/CVE-2021-23017 advisory

Open in Interactive Console →