CVE-2017-20005

score

<0.1

cvss

9.8

epss

3.3%

published

2021-06-06

kev added

—

first seen

2026-10-21

NGINX before 1.13.6 contains a buffer overflow caused by an integer overflow when processing modification dates with more than four digits in the autoindex module, letting remote attackers cause denial of service or potentially execute arbitrary code, exploit requires processing of specially crafted files with large modification dates.