nginx (SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS package nginx, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2021-23017 — CVSS 7.7 (high): A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to…
• CVE-2021-3618 — CVSS 7.4 (high): ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using…