PT-2017-4158 · Nginx+2 · Nginx+2

Jamie Landeg-Jones · Published 2017-08-28 · Updated 2025-12-05 · CVE-2017-20005

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NGINX versions prior to 1.13.6

Description The issue is related to the autoindex module's incorrect handling of years exceeding four digits, which can cause an integer overflow. This can be triggered by a file with a modification date in the distant past or future. The exploitation of this issue may allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For NGINX versions prior to 1.13.6, update to version 1.13.6 or later to resolve the issue. As a temporary workaround, consider disabling the autoindex module until a patch is available. Restrict access to the autoindex module to minimize the risk of exploitation.

Exploit

Fix

Integer Overflow

Buffer Overflow

Weakness Enumeration

CWE-190

CWE-120

Related Identifiers

ALT-PU-2018-1866

BDU:2021-04615

CVE-2017-20005

DLA-2680-1

USN-5109-1

Affected Products

Alt Linux

Nginx

Ubuntu

References · 29

• 🔥 https://github.com/en0f/CVE-2017-7529_PoC · Exploit
• 🔥 https://github.com/liusec/CVE-2017-7529 · Exploit
• 🔥 https://github.com/ninjabuster/exploit-nginx-1.10.3 · Exploit
• 🔥 https://github.com/gemboxteam/exploit-nginx-1.10.3 · Exploit
• 🔥 https://github.com/Shehzadcyber/CVE-2017-7529 · Exploit
• 🔥 https://github.com/MaxSecurity/CVE-2017-7529-POC · Exploit
• 🔥 https://trac.nginx.org/nginx/ticket/1368 · Exploit
• https://github.com/nginx/nginx/commit/0206ebe76f748bb39d9de4dd4b3fce777fdfdccf · Patch
• https://github.com/nginx/nginx/commit/b900cc28fcbb4cf5a32ab62f80b59292e1c85b4b · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2017-20005 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-20005 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-20005 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-20005 · Vendor Advisory
• http://nginx.org/en/CHANGES · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-20005 · Vendor Advisory