CVE-2017-20005

Description

NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modification date in 1969 that causes an integer overflow (or a false modification date far in the future), when encountered by the autoindex module.

Weakness classification

• CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
• CWE-190: Integer Overflow or Wraparound

Primary references

• cve@mitre.org — Release Notes, Vendor Advisory
• cve@mitre.org — Patch, Third Party Advisory
• cve@mitre.org — Patch, Third Party Advisory
• cve@mitre.org — Mailing List, Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Exploit, Patch, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch, Vendor Advisory