vulnwire
9.8crit

CVE-2017-20005in critical feed

NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modification date in 1969 tha…

Published 5 y ago · modified 4 mo ago · JSON

CVSS
9.8
v3.1 · CNA
CISA KEV
No
not known exploited
EPSS
3.3%
percentile 88%
Public exploits
0
none known

NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modification date in 1969 that causes an integer overflow (or a false modification date far in the future), when encountered by the autoindex module.

CISA SSVC assessment

Exploitation
none
Automatable
yes
Technical impact
total
Assessed
11 mo ago

Exploit prediction (EPSS)

3.26% probability of exploitation in the next 30 days, higher than 88% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
CISA ADP3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CNA3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

Classification

Weakness
  • CWE-120 Buffer Copy without Checking Size of Input
  • CWE-190 Integer Overflow or Wraparound
Technology feeds
nginx (RSS, critical only)

References

  • nginx.org /en/CHANGES · x_refsource_MISC, x_transferred
  • trac.nginx.org /nginx/ticket/1368 · x_refsource_MISC, x_transferred
  • github.com /nginx/nginx/commit/0206ebe76f748bb39d9de4dd4b3fce777fdfdccf · x_refsource_MISC, x_transferred
  • github.com /nginx/nginx/commit/b900cc28fcbb4cf5a32ab62f80b59292e1c85b4b · x_refsource_MISC, x_transferred
  • lists.debian.org /debian-lts-announce/2021/06/msg00009.html · mailing-list, x_refsource_MLIST, x_transferred
  • security.netapp.com /advisory/ntap-20210805-0006/ · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.