CNNVD-ID编号 | CNNVD-202001-337 |
CVE编号 | CVE-2019-20372 |
发布时间 | 2020-01-09 |
更新时间 | 2020-12-17 |
漏洞类型 | 环境问题 |
漏洞来源 | N/A |
危险等级 | 中危 |
威胁类型 | 远程 |
厂 商 | N/A |
NGINX是美国NGINX公司的一款轻量级Web服务器/反向代理服务器及电子邮件(IMAP/POP3)代理服务器。
NGINX 1.17.7之前版本中存在安全漏洞。攻击者可利用该漏洞读取未授权的Web页面。
目前厂商已发布升级了NGINX 环境问题漏洞的补丁,NGINX 环境问题漏洞的补丁获取链接:
http://nginx.org/en/CHANGES
来源:nginx.org
来源:github.com
来源:bertjwregeer.keybase.pub
链接:https://bertjwregeer.keybase.pub/2019-12-10%20-%20error_page%20request%20smuggling.pdf
来源:UBUNTU
来源:MISC
链接:https://duo.com/docs/dng-notes#version-1.5.4-january-2020
来源:UBUNTU
来源:CONFIRM
链接:https://github.com/nginx/nginx/commit/c1be55f97211d38b69ac0c2027e6812ab8b1b94e
来源:usn.ubuntu.com
来源:usn.ubuntu.com
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2020/suse-su-20200348-1.html
来源:www.ibm.com
来源:www.auscert.org.au
来源:www.auscert.org.au
来源:www.ibm.com
来源:www.auscert.org.au
来源:nvd.nist.gov
来源:www.ibm.com
来源:www.auscert.org.au
来源:www.auscert.org.au
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/158290/Red-Hat-Security-Advisory-2020-2817-01.html
来源:vigilance.fr
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/160531/Red-Hat-Security-Advisory-2020-5495-01.html
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/155923/Ubuntu-Security-Notice-USN-4235-1.html
来源:www.ibm.com
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/155964/Ubuntu-Security-Notice-USN-4235-2.html
暂无