Lucene search

K
ubuntucveUbuntu.comUB:CVE-2020-21699
HistoryAug 22, 2023 - 12:00 a.m.

CVE-2020-21699

2023-08-2200:00:00
ubuntu.com
ubuntu.com
22
tengine
web server
integer overflow
vulnerability
nginx
range filter module
sensitive information
cve-2020-21699

0.001 Low

EPSS

Percentile

37.0%

The web server Tengine 2.2.2 developed in the Nginx version from 0.5.6 thru
1.13.2 is vulnerable to an integer overflow vulnerability in the nginx
range filter module, resulting in the leakage of potentially sensitive
information triggered by specially crafted requests.

Notes

Author Note
mdeslaur This CVE only applies to the Tengine web server, which is a fork of nginx. The original nginx CVE was CVE-2017-7529.