{"id":"CVE-2019-20372","aliases":["ALPINE-CVE-2019-20372","BELL-CVE-2019-20372","DEBIAN-CVE-2019-20372","EUVD-2019-10924","GHSA-c9vh-3f9g-f2xf","MGASA-2020-0231","RHSA-2020:2817","RHSA-2020:5495","SUSE-SU-2020:0348-1","SUSE-SU-2020:1171-1","UBUNTU-CVE-2019-20372","USN-4235-1","USN-4235-2","openSUSE-SU-2020:0204-1","openSUSE-SU-2024:11092-1"],"status":"published","title":"NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as...","description":"NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.14961,"percentile":0.96733,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-444"],"published":"2020-01-09T20:05:38Z","modified":"2026-10-20T13:56:52Z","exploits":[{"source":"pocgithub","id":"vuongnv3389-sec/CVE-2019-20372","title":"vuongnv3389-sec/CVE-2019-20372","date":"2022-04-06","url":"https://github.com/vuongnv3389-sec/CVE-2019-20372"},{"source":"pocgithub","id":"0xleft/CVE-2019-20372","title":"0xleft/CVE-2019-20372","date":"2023-09-16","url":"https://github.com/0xleft/CVE-2019-20372"},{"source":"pocgithub","id":"moften/CVE-2019-20372","title":"moften/CVE-2019-20372","date":"2025-02-07","url":"https://github.com/moften/CVE-2019-20372"}],"fixes":[{"ecosystem":"Alpine:v3.10","package":"nginx","fixed_in":["1.16.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"nginx","fixed_in":["1.16.1-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"nginx","fixed_in":["1.16.1-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"nginx","fixed_in":["1.16.1-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"nginx","fixed_in":["1.16.1-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"nginx","fixed_in":["1.16.1-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"nginx","fixed_in":["1.16.1-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"nginx","fixed_in":["1.16.1-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"nginx","fixed_in":["1.16.1-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"nginx","fixed_in":["1.16.1-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"nginx","fixed_in":["1.16.1-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"nginx","fixed_in":["1.16.1-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"nginx","fixed_in":["1.16.1-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"nginx","fixed_in":["1.16.1-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"nginx","fixed_in":["1.16.1-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"nginx","fixed_in":["1.14.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"nginx","fixed_in":["1.14.2-r5"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"nginx","fixed_in":["1.16.1-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nginx","fixed_in":["1.16.1-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nginx","fixed_in":["1.16.1-3"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"nginx","fixed_in":["1.16.1-1.2.mga7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-nginx116-nginx","fixed_in":["1:1.16.1-4.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-nginx116-nginx-debuginfo","fixed_in":["1:1.16.1-4.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-nginx116-nginx-mod-http-image-filter","fixed_in":["1:1.16.1-4.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-nginx116-nginx-mod-http-perl","fixed_in":["1:1.16.1-4.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-nginx116-nginx-mod-http-xslt-filter","fixed_in":["1:1.16.1-4.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-nginx116-nginx-mod-mail","fixed_in":["1:1.16.1-4.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-nginx116-nginx-mod-stream","fixed_in":["1:1.16.1-4.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx","fixed_in":["1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-all-modules","fixed_in":["1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-debuginfo","fixed_in":["1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-debugsource","fixed_in":["1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-filesystem","fixed_in":["1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-image-filter","fixed_in":["1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-image-filter-debuginfo","fixed_in":["1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-perl","fixed_in":["1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-perl-debuginfo","fixed_in":["1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-xslt-filter","fixed_in":["1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-xslt-filter-debuginfo","fixed_in":["1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-mail","fixed_in":["1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-mail-debuginfo","fixed_in":["1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-stream","fixed_in":["1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-stream-debuginfo","fixed_in":["1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP1","package":"nginx","fixed_in":["1.14.2-6.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"nginx","fixed_in":["1.16.1-3.12.7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"nginx","fixed_in":["1.16.1-3.12.7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"nginx","fixed_in":["1.16.1-3.12.7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"nginx","fixed_in":["1.16.1-3.12.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"nginx","fixed_in":["1.4.6-1ubuntu3.9+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"nginx","fixed_in":["1.10.3-0ubuntu0.16.04.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"nginx","fixed_in":["1.14.0-0ubuntu1.7"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"nginx","fixed_in":["1.14.2-lp151.4.6.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-r5"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-3"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-1.2.mga7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-nginx116-nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.16.1-4.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-nginx116-nginx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.16.1-4.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-nginx116-nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.16.1-4.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-nginx116-nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.16.1-4.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-nginx116-nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.16.1-4.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-nginx116-nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.16.1-4.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-nginx116-nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.16.1-4.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-image-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-perl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-xslt-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-mail-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-stream-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP1","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-6.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-3.12.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-3.12.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-3.12.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-3.12.7"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.6-1ubuntu3.9+esm1"}]}],"versions":["1.4.1-3ubuntu1","1.4.3-2ubuntu1","1.4.4-1ubuntu1","1.4.4-2ubuntu1","1.4.4-4ubuntu1","1.4.5-1ubuntu1","1.4.6-1ubuntu2","1.4.6-1ubuntu3","1.4.6-1ubuntu3.1","1.4.6-1ubuntu3.2","1.4.6-1ubuntu3.3","1.4.6-1ubuntu3.4","1.4.6-1ubuntu3.5","1.4.6-1ubuntu3.6","1.4.6-1ubuntu3.7","1.4.6-1ubuntu3.8","1.4.6-1ubuntu3.9"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-0ubuntu0.16.04.5"}]}],"versions":["1.9.3-1ubuntu1","1.9.6-2ubuntu1","1.9.6-2ubuntu2","1.9.9-0ubuntu1","1.9.9-1ubuntu1","1.9.10-0ubuntu1","1.9.10-1ubuntu1","1.9.11-0ubuntu1","1.9.11-0ubuntu2","1.9.12-0ubuntu1","1.9.13-0ubuntu1","1.9.14-0ubuntu1","1.9.15-0ubuntu1","1.10.0-0ubuntu0.16.04.1","1.10.0-0ubuntu0.16.04.2","1.10.0-0ubuntu0.16.04.3","1.10.0-0ubuntu0.16.04.4","1.10.3-0ubuntu0.16.04.1","1.10.3-0ubuntu0.16.04.2","1.10.3-0ubuntu0.16.04.3","1.10.3-0ubuntu0.16.04.4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.7"}]}],"versions":["1.12.1-0ubuntu2","1.13.6-2ubuntu1","1.13.6-2ubuntu2","1.13.10-1ubuntu1","1.13.12-0ubuntu1","1.14.0-0ubuntu1","1.14.0-0ubuntu1.1","1.14.0-0ubuntu1.2","1.14.0-0ubuntu1.3","1.14.0-0ubuntu1.4","1.14.0-0ubuntu1.5","1.14.0-0ubuntu1.6"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-0ubuntu0.16.04.5"}]}],"versions":["1.9.3-1ubuntu1","1.9.6-2ubuntu1","1.9.6-2ubuntu2","1.9.9-0ubuntu1","1.9.9-1ubuntu1","1.9.10-0ubuntu1","1.9.10-1ubuntu1","1.9.11-0ubuntu1","1.9.11-0ubuntu2","1.9.12-0ubuntu1","1.9.13-0ubuntu1","1.9.14-0ubuntu1","1.9.15-0ubuntu1","1.10.0-0ubuntu0.16.04.1","1.10.0-0ubuntu0.16.04.2","1.10.0-0ubuntu0.16.04.3","1.10.0-0ubuntu0.16.04.4","1.10.3-0ubuntu0.16.04.1","1.10.3-0ubuntu0.16.04.2","1.10.3-0ubuntu0.16.04.3","1.10.3-0ubuntu0.16.04.4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.7"}]}],"versions":["1.12.1-0ubuntu2","1.13.6-2ubuntu1","1.13.6-2ubuntu2","1.13.10-1ubuntu1","1.13.12-0ubuntu1","1.14.0-0ubuntu1","1.14.0-0ubuntu1.1","1.14.0-0ubuntu1.2","1.14.0-0ubuntu1.3","1.14.0-0ubuntu1.4","1.14.0-0ubuntu1.5","1.14.0-0ubuntu1.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.6-1ubuntu3.9+esm1"}]}],"versions":["1.4.1-3ubuntu1","1.4.3-2ubuntu1","1.4.4-1ubuntu1","1.4.4-2ubuntu1","1.4.4-4ubuntu1","1.4.5-1ubuntu1","1.4.6-1ubuntu2","1.4.6-1ubuntu3","1.4.6-1ubuntu3.1","1.4.6-1ubuntu3.2","1.4.6-1ubuntu3.3","1.4.6-1ubuntu3.4","1.4.6-1ubuntu3.5","1.4.6-1ubuntu3.6","1.4.6-1ubuntu3.7","1.4.6-1ubuntu3.8","1.4.6-1ubuntu3.9"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-lp151.4.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.3-1.4"}]}],"bundled":7}],"products":[{"vendor":"apple","product":"xcode"},{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"f5","product":"nginx"},{"vendor":"netapp","product":"cloud_backup"},{"vendor":"opensuse","product":"leap"}],"references":[{"url":"https://bertjwregeer.keybase.pub/2019-12-10%20-%20error_page%20request%20smuggling.pdf","tags":["x_refsource_MISC","x_transferred","Exploit","Mitigation","Third Party Advisory","evidence","report"]},{"url":"http://nginx.org/en/CHANGES","tags":["x_refsource_MISC","x_transferred","Mitigation","Release Notes","Vendor Advisory","advisory","report"]},{"url":"https://duo.com/docs/dng-notes#version-1.5.4-january-2020","tags":["x_refsource_MISC","x_transferred","Release Notes","Third Party Advisory","advisory","report"]},{"url":"https://github.com/kubernetes/ingress-nginx/pull/4859","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://github.com/nginx/nginx/commit/c1be55f97211d38b69ac0c2027e6812ab8b1b94e","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix"]},{"url":"https://usn.ubuntu.com/4235-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://usn.ubuntu.com/4235-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20200127-0003/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00013.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/kb/HT212818","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2021/Sep/36","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-20372","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-c9vh-3f9g-f2xf"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-20372","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-20372","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-20372","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0231.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26086","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:2817","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1790277","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2817.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-20372","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-20372","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:5495","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5495.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200348-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1160682","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20372","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201171-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1150711","tags":["report"]},{"url":"https://bugzilla.suse.com/1155690","tags":["report"]},{"url":"https://bugzilla.suse.com/1156202","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-20372","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4235-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4235-2","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BCWZIDFWEMUMKDU7MODK72345IQ5IT7D/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23017","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-20372","description":"NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.","status":"published","published":"2020-01-09T20:05:38Z","modified":"2024-08-05T02:39:09.206Z","updated_at":"2026-11-02T14:20:17.431882Z"}],"euvd":[{"id":"EUVD-2019-10924","description":"NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.","status":"published","published":"2020-01-09T20:05:38Z","modified":"2024-08-05T02:39:09Z","updated_at":"2026-11-03T02:40:22.702411Z"}],"ghsa":[{"id":"GHSA-c9vh-3f9g-f2xf","title":"NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as...","description":"NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.","status":"published","published":"2022-05-24T17:05:58Z","modified":"2023-01-29T05:01:05Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-444"],"updated_at":"2026-11-02T14:44:44.036588Z"}],"nvd":[{"id":"CVE-2019-20372","description":"NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.","status":"published","published":"2020-01-09T21:15:12.027Z","modified":"2026-06-17T02:30:18.467Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-444"],"updated_at":"2026-11-02T14:05:42.416368Z"}],"osv":[{"id":"ALPINE-CVE-2019-20372","description":"NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.","status":"published","published":"2020-01-09T21:15:12.027Z","modified":"2026-09-21T06:17:52.511243261Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:27:47.663013Z"},{"id":"BELL-CVE-2019-20372","title":"CVE-2019-20372 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:16:09.396351Z","modified":"2026-01-26T09:47:13.991798Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-20372","description":"NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.","status":"published","published":"2020-01-09T21:15:12.027Z","modified":"2026-10-20T13:56:52.631984062Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:12.010761Z"},{"id":"DEBIAN-CVE-2019-20372","description":"NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.","status":"published","published":"2020-01-09T21:15:12.027Z","modified":"2026-09-21T07:01:00.978852739Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:32.221385Z"},{"id":"RHSA-2020:2817","title":"Red Hat Security Advisory: rh-nginx116-nginx security update","status":"published","published":"2024-09-13T16:20:18Z","modified":"2026-06-28T10:37:55Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:5495","title":"Red Hat Security Advisory: nginx:1.16 security update","status":"published","published":"2024-09-13T16:21:59Z","modified":"2026-06-28T10:41:10Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"UBUNTU-CVE-2019-20372","description":"NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.","status":"published","published":"2020-01-09T21:15:00Z","modified":"2026-02-04T03:24:50.787282Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:21.213407Z"},{"id":"MGASA-2020-0231","title":"Updated nginx packages fix security vulnerability","description":"Nginx was updated due to the following vulnerabilities:\nngx_http_special_response.c: With a certain error_page configuration,\nHTTP request smuggling is possible. Thus, an attacker may be able to\nread unauthorized web pages at times when NGINX is being fronted by a\nload balancer. (CVE-2019-20372).\n","status":"published","published":"2020-05-27T09:52:46Z","modified":"2026-04-16T04:42:45.487735846Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2020:0204-1","title":"Security update for nginx","description":"This update for nginx fixes the following issues:\n\n- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page \n  configurations which could have allowed unauthorized web page reads (bsc#1160682). \n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2020-02-11T17:12:54Z","modified":"2026-02-04T03:09:07.203567Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:11092-1","title":"nginx-1.21.3-1.4 on GA media","description":"These are all security issues fixed in the nginx-1.21.3-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:16:09.585703Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2020:0348-1","title":"Security update for nginx","description":"This update for nginx fixes the following issues:\n\n- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page \n  configurations which could have allowed unauthorized web page reads (bsc#1160682). \n","status":"published","published":"2020-02-06T12:23:23Z","modified":"2026-02-04T03:12:15.879535Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:1171-1","title":"Security update for nginx","description":"This update for nginx fixes the following issues:\n\nnginx was updated to 1.16.1 (jsc#ECO-1401)\t  \n\n- Added TLS 1.3 support (jsc#SLE-9295, bsc#1150711)\n- Replaced obsolete GeoIP module with MaxMinDB-based GeoIP2\n  (jsc#SLE-11184, bsc#1156202)\n- Started nginx after network is online (bsc#1155690)\t  \n- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page \n  configurations which could have allowed unauthorized web page reads (bsc#1160682). \t  \n","status":"published","published":"2020-05-04T15:06:28Z","modified":"2026-02-04T02:53:53.757744Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"USN-4235-1","title":"nginx vulnerability","description":"Bert JW Regeer and Francisco Oca Gonzalez discovered that nginx incorrectly\nhandled certain error_page configurations. A remote attacker could possibly\nuse this issue to perform HTTP request smuggling attacks and access\nresources contrary to expectations.\n","status":"published","published":"2020-01-13T15:29:42Z","modified":"2026-02-10T04:41:45Z","updated_at":"2026-11-02T16:58:14.547547Z"},{"id":"USN-4235-2","title":"nginx vulnerability","description":"USN-4235-1 fixed a vulnerability in nginx. This update provides\nthe corresponding update for Ubuntu 14.04 ESM.\n\nOriginal advisory details:\n\n Bert JW Regeer and Francisco Oca Gonzalez discovered that nginx incorrectly\n handled certain error_page configurations. A remote attacker could possibly\n use this issue to perform HTTP request smuggling attacks and access\n resources contrary to expectations.\n","status":"published","published":"2020-01-15T18:22:04Z","modified":"2026-02-10T04:41:45Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}