Skip to content
OpenAdvisories
Critical USN-5109-1 1 CVE

nginx vulnerability

Published Oct 18, 2021 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that nginx incorrectly handled files with
certain modification dates. A remote attacker could possibly
use this issue to cause a denial of service or other unspecified
impact.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS nginx 1.4.6-1ubuntu3.9+esm3
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS nginx 1.10.3-0ubuntu0.16.04.5+esm2

Vulnerabilities 1

  • Critical 9.8
    CVE-2017-20005

    NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modificat…

    nginx nginx Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2017-20005