CVE:CVE-2021-23017
CNNVD:CNNVD-202105-1581
F5 NGINX Controller是美国F5公司的一款用于NGINX的集中式监视和管理平台。该平台支持使用可视化界面管理多个NGINX实例。
F5 NGINX Controller存在安全漏洞，该漏洞允许攻击者从DNS服务器伪造UDP数据包造成1-byte的内存覆盖，导致工作进程崩溃或潜在的其他影响。
solution:Upgrade f5 nginx to a higher version than 1.20.1,and avoid the version [0.6.18,1.20.1); Upgrade openresty openresty to a higher version than 1.19.3.2,and avoid the version (,1.19.3.2); Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -; Upgrade oracle blockchain_platform to a higher version than 21.1.2,and avoid the version (,21.1.2); Upgrade oracle communications_control_plane_monitor to a higher version than 3.4,4.2,4.3,4.4,and avoid the version 3.4,4.2,4.3,4.4; Upgrade oracle communications_fraud_monitor to a higher version than 4.4,and avoid the version [3.4,4.4]; Upgrade oracle communications_operations_monitor to a higher version than 3.4,4.2,4.3,4.4,and avoid the version 3.4,4.2,4.3,4.4; Upgrade oracle communications_session_border_controller to a higher version than 8.4,9.0,and avoid the version 8.4,9.0; Upgrade oracle enterprise_communications_broker to a higher version than 3.3.0,and avoid the version 3.3.0; Upgrade oracle enterprise_session_border_controller to a higher version than 8.4,9.0,and avoid the version 8.4,9.0; Upgrade oracle enterprise_telephony_fraud_monitor to a higher version than 3.4,4.2,4.3,4.4,and avoid the version 3.4,4.2,4.3,4.4; Upgrade oracle goldengate to a higher version than 21.4.0.0.0,and avoid the version (,21.4.0.0.0)