{"id":"CVE-2017-20005","published":"2021-06-06T21:04:06Z","modified":"2025-12-05T14:54:13Z","title":"NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modification date in 1969 that causes an integer overflow (or a false modification date far in the future), when encountered by the autoindex module.","provenance":"source","from":"CVE.org"},"summary":{"text":"NGINX before 1.13.6 contains a critical buffer overflow in the autoindex module triggered by file modification dates with years exceeding four digits, such as a 1969 date or a false far-future date, which causes an integer overflow. Any system running an affected version of NGINX is impacted.","provenance":"ai","model":"deepseek-v4-flash","generatedAt":"2026-10-23T03:20:08Z"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.03258,"percentile":0.8832,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-120","name":"Buffer Copy without Checking Size of Input"},{"id":"CWE-190","name":"Integer Overflow or Wraparound"}],"references":[{"url":"http://nginx.org/en/CHANGES","tags":["x_refsource_MISC"]},{"url":"https://trac.nginx.org/nginx/ticket/1368","tags":["x_refsource_MISC"]},{"url":"https://github.com/nginx/nginx/commit/0206ebe76f748bb39d9de4dd4b3fce777fdfdccf","tags":["x_refsource_MISC"]},{"url":"https://github.com/nginx/nginx/commit/b900cc28fcbb4cf5a32ab62f80b59292e1c85b4b","tags":["x_refsource_MISC"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/06/msg00009.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://security.netapp.com/advisory/ntap-20210805-0006/","tags":["x_refsource_CONFIRM"]}],"techniques":[],"reports":[{"id":"SRC-b804e28bf5894dd4955f","title":"Whitepaper Name Goes","publisher":"trustwave.com","url":"https://www.trustwave.com/hubfs/Web/Library/Documents_pdf/Trustwave_SpiderLabs_2023_Hospitality_Sector_Threat_Landscape.pdf","date":null,"mentions":[{"quote":"Denial of Service or\r\nRemote Code Execution vulnerabilities:\r\n▪ ALPACA Attack(CVE-2021-3618)\r\n▪ Apache Tomcat HTTP Request Smuggling (CVE-2021-23017)\r\n▪ Mod_dav module of httpd DoS (CVE-2006-20001)\r\n▪ Mod_proxy module of httpd (CVE-2022-37436)\r\n▪ SQLite DoS vulnerability (CVE-2019-20372)\r\n▪ Jenkins RCE (CVE-2017-20005)","start":45448,"end":45768}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2017-11020","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-11020","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2021-06-06","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2017-20005","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":28.4,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":17.66,"detail":"percentile 0.8832"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":6.86,"detail":"base score 9.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}