Jamie Landeg-Jones and Manfred Paul discovered a buffer overflow vulnerability in NGINX, a small, powerful, scalable web/proxy server.

NGINX has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modification date in 1969 that causes an integer overflow (or a false modification date far in the future), when encountered by the autoindex module.

For Debian 9 stretch, this problem has been fixed in version 1.10.3-1+deb9u7.

We recommend that you upgrade your nginx packages.

For the detailed security status of nginx please refer to its security tracker page at: https://security-tracker.debian.org/tracker/nginx

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Jamie Landeg-Jone氏とManfred Paul氏が、小さく強力でスケーラブルなWeb/プロキシサーバーであるNGINXにバッファオーバーフローの脆弱性を発見しました。

NGINXには、4桁を超える年号のバッファオーバーフローがあります。これは、1969年の変更日を含むファイルによって実証されています。これにより、自動インデックスモジュールが検出された場合に、整数オーバーフロー（または誤った修正日が遠い将来）が発生します。

Debian 9 'Stretch'では、この問題はバージョン1.10.3-1+deb9u7で修正されています。

お使いのnginxパッケージをアップグレードすることを推奨します。

nginxの詳細なセキュリティステータスについては、そのセキュリティトラッカーページを参照してください: https://security-tracker.debian.org/tracker/nginx

注：Tenable Network Securityは、前述の記述ブロックをDLAセキュリティアドバイザリーから直接抽出しています。Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

远程 Ubuntu 16.04 LTS 主机上安装的程序包受到 USN-5109-1 公告中提及的漏洞影响。

  - NGINX 1.13.6 之前的版本中多年来一直存在超过四位数的缓冲区溢出，如修改日期为 1969 年的文件所证实，autoindex 模块遇到该文件时，该文件会导致整数溢出（或在很久以后出现错误的修改日期）。(CVE-2017-20005)

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

リモートのUbuntu 16.04 LTSホストには、USN-5109-1のアドバイザリに記載された脆弱性の影響を受けるパッケージがインストールされています。

  -1.13.6より前のNGINXには、4桁を超える年号のバッファオーバーフローがあります。これは、1969年の変更日を含むファイルによって実証されています。これにより、自動インデックスモジュールが検出された場合に、整数オーバーフロー（または誤った修正日が遠い将来）が発生します。（CVE-2017-20005）

Nessus はこの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

According to the versions of the nginx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file     with a modification date in 1969 that causes an integer overflow (or a false modification date far in the     future), when encountered by the autoindex module. (CVE-2017-20005)

  - ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing     different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A     MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one     subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-     protocol attacks may be possible where the behavior of one protocol service may compromise the other at     the application layer. (CVE-2021-3618)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5109-1 advisory.

    It was discovered that nginx incorrectly handled files with certain modification dates. A remote attacker     could possibly use this issue to cause a denial of service or other unspecified impact.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Jamie Landeg-Jones 和 Manfred Paul 在 NGINX (一種功能強大的小型可擴充 Web/Proxy 伺服器) 中發現緩衝區溢位弱點。

NGINX 存在超過四位數字年份的緩衝區溢位，當 autoindex 模組遇到修改日期為 1969 年的檔案時，會造成整數溢位 (或錯誤的未來修改日期)。

針對 Debian 9 Stretch，已在 1.10.3-1+deb9u7 版本中修正此問題。

建議您升級 nginx 套件。

如需有關 nginx 安全性狀態的詳細資訊，請參閱其安全追蹤頁面： https://security-tracker.debian.org/tracker/nginx

注意：Tenable Network Security 已直接從 DLA 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

遠端 Ubuntu 16.04 LTS 主機上安裝的套件受到 USN-5109-1 公告中所提及的一個弱點影響。

  - 1.13.6 版之前的 NGINX 存在超過四位數字年份的緩衝區溢位，當 autoindex 模組遇到修改日期為 1969 年的檔案時，會造成整數溢位 (或錯誤的未來修改日期)。(CVE-2017-20005)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

According to the versions of the nginx package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A security issue in nginx resolver was identified,     which might allow an attacker who is able to forge UDP     packets from the DNS server to cause 1-byte memory     overwrite, resulting in worker process crash or     potential other impact.(CVE-2021-23017)

  - NGINX before 1.13.6 has a buffer overflow for years     that exceed four digits, as demonstrated by a file with     a modification date in 1969 that causes an integer     overflow (or a false modification date far in the     future), when encountered by the autoindex     module.(CVE-2017-20005)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the nginx package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file     with a modification date in 1969 that causes an integer overflow (or a false modification date far in the     future), when encountered by the autoindex module. (CVE-2017-20005)

  - ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing     different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A     MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one     subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-     protocol attacks may be possible where the behavior of one protocol service may compromise the other at     the application layer. (CVE-2021-3618)

  - A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP     packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or     potential other impact. (CVE-2021-23017)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Jamie Landeg-Jones 和 Manfred Paul 在小型、强大、可扩展的 Web/代理服务器 NGINX 中发现一个缓冲区溢出漏洞。

NGINX 多年来一直存在超过四位数的缓冲区溢出，如修改日期为 1969 年的文件所证实，autoindex 模块遇到该文件时，该文件会导致整数溢出（或在很久以后出现错误的修改日期）。

对于 Debian 9 Stretch，已在版本 1.10.3-1+deb9u7 中修复此问题。

建议您升级 nginx 程序包。

如需了解 nginx 的详细安全状态，请参阅其安全跟踪页面： https://security-tracker.debian.org/tracker/nginx

注意：Tenable Network Security 已直接从 DLA 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下，尽可能进行自动清理和排版。

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
150336	Debian DLA-2680-1 : nginx security update	Nessus	Debian Local Security Checks	2021/6/8	2024/1/12	critical
150336	DebianDLA-2680-1：nginxのセキュリティ更新	Nessus	Debian Local Security Checks	2021/6/8	2024/1/12	critical
154203	Ubuntu 16.04 ESM：nginx 漏洞 (USN-5109-1)	Nessus	Ubuntu Local Security Checks	2021/10/18	2024/8/28	critical
154203	Ubuntu 16.04 ESM: nginxの脆弱性 (USN-5109-1)	Nessus	Ubuntu Local Security Checks	2021/10/18	2024/8/28	critical
153608	EulerOS 2.0 SP8 : nginx (EulerOS-SA-2021-2476)	Nessus	Huawei Local Security Checks	2021/9/24	2023/11/29	critical
154203	Ubuntu 16.04 ESM : nginx vulnerability (USN-5109-1)	Nessus	Ubuntu Local Security Checks	2021/10/18	2024/8/28	critical
150336	Debian DLA-2680-1：nginx 安全性更新	Nessus	Debian Local Security Checks	2021/6/8	2024/1/12	critical
154203	Ubuntu 16.04 ESM：nginx 弱點 (USN-5109-1)	Nessus	Ubuntu Local Security Checks	2021/10/18	2024/8/28	critical
153261	EulerOS 2.0 SP2 : nginx (EulerOS-SA-2021-2412)	Nessus	Huawei Local Security Checks	2021/9/14	2023/12/1	critical
154391	EulerOS 2.0 SP3 : nginx (EulerOS-SA-2021-2599)	Nessus	Huawei Local Security Checks	2021/10/25	2022/3/28	critical
150336	Debian DLA-2680-1：nginx 安全更新	Nessus	Debian Local Security Checks	2021/6/8	2024/1/12	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical