Name: CVE-2019-20372: Inconsistent Interpretation of HTTP Requests
Published: 2020-01-09T00:00:00.000Z
Keywords: CVE, CVE-2019-20372, CWE-444, CVSS 5.3, EPSS 0.14961

NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.

CVSS Details

CVSS 3.1 Base Score: 5.3
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	View advisory ↗View advisory ↗	alma-upgrade-nginxalma-upgrade-nginx-all-modulesalma-upgrade-nginx-filesystemalma-upgrade-nginx-mod-http-image-filteralma-upgrade-nginx-mod-http-perlalma-upgrade-nginx-mod-http-xslt-filteralma-upgrade-nginx-mod-mailalma-upgrade-nginx-mod-stream	May 4, 2022	Jan 9, 2020
Alpine Linux	View advisory ↗View advisory ↗	alpine-linux-upgrade-nginx	Feb 11, 2020	Jan 9, 2020
Amazon Linux Ami 2	View advisory ↗	amazon-linux-ami-2-upgrade-nginxamazon-linux-ami-2-upgrade-nginx-all-modulesamazon-linux-ami-2-upgrade-nginx-debuginfoamazon-linux-ami-2-upgrade-nginx-filesystemamazon-linux-ami-2-upgrade-nginx-mod-http-geoipamazon-linux-ami-2-upgrade-nginx-mod-http-image-filteramazon-linux-ami-2-upgrade-nginx-mod-http-perlamazon-linux-ami-2-upgrade-nginx-mod-http-xslt-filteramazon-linux-ami-2-upgrade-nginx-mod-mailamazon-linux-ami-2-upgrade-nginx-mod-stream	Sep 28, 2023	Jan 9, 2020
Centos_linux	—	centos-upgrade-nginxcentos-upgrade-nginx-all-modulescentos-upgrade-nginx-debuginfocentos-upgrade-nginx-debugsourcecentos-upgrade-nginx-filesystemcentos-upgrade-nginx-mod-http-image-filtercentos-upgrade-nginx-mod-http-image-filter-debuginfocentos-upgrade-nginx-mod-http-perlcentos-upgrade-nginx-mod-http-perl-debuginfocentos-upgrade-nginx-mod-http-xslt-filtercentos-upgrade-nginx-mod-http-xslt-filter-debuginfocentos-upgrade-nginx-mod-mailcentos-upgrade-nginx-mod-mail-debuginfocentos-upgrade-nginx-mod-streamcentos-upgrade-nginx-mod-stream-debuginfo	Dec 21, 2020	Jan 9, 2020
Debian	View advisory ↗	debian-upgrade-nginx	Jul 30, 2024	Jan 9, 2020
Freebsd	View advisory ↗	freebsd-upgrade-package-nginxfreebsd-upgrade-package-nginx-devel	Feb 10, 2020	Feb 9, 2020
Huawei Euleros 2_0_sp2	View advisory ↗	huawei-euleros-2_0_sp2-upgrade-nginx	Jun 17, 2020	Jan 9, 2020
Huawei Euleros 2_0_sp3	View advisory ↗	huawei-euleros-2_0_sp3-upgrade-nginx	Apr 16, 2020	Jan 9, 2020
Huawei Euleros 2_0_sp5	View advisory ↗	huawei-euleros-2_0_sp5-upgrade-nginxhuawei-euleros-2_0_sp5-upgrade-nginx-all-moduleshuawei-euleros-2_0_sp5-upgrade-nginx-filesystemhuawei-euleros-2_0_sp5-upgrade-nginx-mod-http-image-filterhuawei-euleros-2_0_sp5-upgrade-nginx-mod-http-perlhuawei-euleros-2_0_sp5-upgrade-nginx-mod-http-xslt-filterhuawei-euleros-2_0_sp5-upgrade-nginx-mod-mailhuawei-euleros-2_0_sp5-upgrade-nginx-mod-stream	Feb 24, 2020	Jan 9, 2020
Huawei Euleros 2_0_sp8	View advisory ↗	huawei-euleros-2_0_sp8-upgrade-nginxhuawei-euleros-2_0_sp8-upgrade-nginx-all-moduleshuawei-euleros-2_0_sp8-upgrade-nginx-filesystemhuawei-euleros-2_0_sp8-upgrade-nginx-mod-http-image-filterhuawei-euleros-2_0_sp8-upgrade-nginx-mod-http-perlhuawei-euleros-2_0_sp8-upgrade-nginx-mod-http-xslt-filterhuawei-euleros-2_0_sp8-upgrade-nginx-mod-mailhuawei-euleros-2_0_sp8-upgrade-nginx-mod-stream	Feb 26, 2020	Jan 9, 2020
Nginx	View advisory ↗	nginx-nginx-upgrade-1_17_7	Feb 10, 2023	Jan 9, 2020
Oracle_linux	—	oracle-linux-upgrade-nginxoracle-linux-upgrade-nginx-all-modulesoracle-linux-upgrade-nginx-filesystemoracle-linux-upgrade-nginx-mod-http-image-filteroracle-linux-upgrade-nginx-mod-http-perloracle-linux-upgrade-nginx-mod-http-xslt-filteroracle-linux-upgrade-nginx-mod-mailoracle-linux-upgrade-nginx-mod-stream	Dec 18, 2020	Jan 9, 2020
Redhat_linux	View advisory ↗	no-fix-redhat-rpm-packageredhat-upgrade-nginxredhat-upgrade-nginx-all-modulesredhat-upgrade-nginx-debuginforedhat-upgrade-nginx-debugsourceredhat-upgrade-nginx-filesystemredhat-upgrade-nginx-mod-http-image-filterredhat-upgrade-nginx-mod-http-image-filter-debuginforedhat-upgrade-nginx-mod-http-perlredhat-upgrade-nginx-mod-http-perl-debuginforedhat-upgrade-nginx-mod-http-xslt-filterredhat-upgrade-nginx-mod-http-xslt-filter-debuginforedhat-upgrade-nginx-mod-mailredhat-upgrade-nginx-mod-mail-debuginforedhat-upgrade-nginx-mod-streamredhat-upgrade-nginx-mod-stream-debuginfo	Dec 21, 2020	Jan 9, 2020
Suse	—	suse-upgrade-nginxsuse-upgrade-nginx-sourcesuse-upgrade-vim-plugin-nginx	Feb 12, 2020	Jan 9, 2020
Ubuntu	View advisory ↗	ubuntu-pro-upgrade-nginx-commonubuntu-pro-upgrade-nginx-coreubuntu-pro-upgrade-nginx-extrasubuntu-pro-upgrade-nginx-fullubuntu-pro-upgrade-nginx-lightubuntu-upgrade-nginx-commonubuntu-upgrade-nginx-coreubuntu-upgrade-nginx-extrasubuntu-upgrade-nginx-fullubuntu-upgrade-nginx-light	Jan 14, 2020	Jan 9, 2020
Vmware Photon_os	View advisory ↗	vmware-photon_os_update_tdnf	Jan 20, 2025	Jan 9, 2020

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub