CVE-2019-20372: apple xcode HTTP Request/Response Smuggling

CVSS: 5.3v3.1MediumModified

AliasesALPINE-CVE-2019-20372MGASA-2020-0231SUSE-SU-2020:0348-1+8 more

Published 09-01-2020Last modified 05-08-2024

Vulnerability summary

CVE-2019-20372 is a medium (CVSS 5.3) HTTP Request/Response Smuggling vulnerability in apple xcode. EPSS estimates a 14.96% chance of exploitation in the next 30 days, higher than 96.6% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

34/100

0100

Medium · default modelHow is this calculated?

CVSS score

5.3/10

010

Medium · v3.1 (NVD)

EPSS score

14.96%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 1 · Related 1

OPENSUSE-SU-2024:11092-1

Timeline

09-01-2020
PublishedVulnerability first disclosed.
05-08-2024
Last modifiedVulnerability information updated.

Description

NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.

CVSS metrics

6 scores · 5 sources · 2 versions

v3.15.3v2.04.3

EPSS trend

Probability

14.96%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 14.96% on 18-09-2026

18-09-202618-10-2026

EPSS score

14.96%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (bertjwregeer.keybase.pub)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.

Affected systems

Redhat22 products

nginx< 1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1
nginx-all-modules< 1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1
nginx-debuginfo< 1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1
nginx-debugsource< 1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1
nginx-filesystem< 1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1

Show all 22

Suse5 products

nginx&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS< 1.16.1-3.12.7
nginx&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS< 1.16.1-3.12.7
nginx&distro=SUSE Linux Enterprise Module for Server Applications 15 SP1< 1.14.2-6.7.1
nginx&distro=SUSE Linux Enterprise Server 15-LTSS< 1.16.1-3.12.7
nginx&distro=SUSE Linux Enterprise Server for SAP Applications 15< 1.16.1-3.12.7

Opensuse2 products

leapEOL15.1
nginx&distro=openSUSE Leap 15.1< 1.14.2-lp151.4.6.1

Alpine1 product

nginx< 1.16.1-r2 | < 1.16.1-r6 | < 1.14.2-r2 | < 1.14.2-r5

Apple1 product

xcode< 13.0

Canonical1 product

ubuntu_linuxEOL14.04

Debian1 product

nginx< 1.16.1-3

F51 product

nginx< 1.17.7

Mageia1 product

nginx< 1.16.1-1.2.mga7

Netapp1 product

cloud_backupna

Ubuntu1 product

nginx< 1.10.3-0ubuntu0.16.04.5 | < 1.14.0-0ubuntu1.7 | < 1.4.6-1ubuntu3.9+esm1

11 vendors · 37 products

References

35 links

bertjwregeer.keybase.pub/2019-12-10%20-%20error_page%20request%20smuggling.pdfX Refsource MISCREPORTExploitMitigationThird Party Advisory
nginx.org/en/CHANGESX Refsource MISCREPORTMitigationRelease NotesVendor Advisory
duo.com/docs/dng-notesX Refsource MISCREPORTRelease NotesThird Party Advisory
github.com/kubernetes/ingress-nginx/pull/4859X Refsource MISCREPORTPatchThird Party Advisory
github.com/nginx/nginx/commit/c1be55f97211d38b69ac0c2027e6812ab8b1b94eX Refsource CONFIRMPatchVendor Advisory
usn.ubuntu.com/4235-1/Vendor AdvisoryX Refsource UBUNTUWEBThird Party Advisory
usn.ubuntu.com/4235-2/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
security.netapp.com/advisory/ntap-20200127-0003/X Refsource CONFIRMThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2020-02/msg00013.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
support.apple.com/kb/HT212818X Refsource CONFIRMThird Party Advisory

Show all 35 references

seclists.org/fulldisclosure/2021/Sep/36Mailing ListX Refsource FULLDISCThird Party Advisory
security.alpinelinux.org/vuln/CVE-2019-20372Advisory
advisories.mageia.org/MGASA-2020-0231.htmlAdvisory
bugs.mageia.org/show_bug.cgi?id=26086REPORT
www.suse.com/support/update/announcement/2020/suse-su-20200348-1/Advisory
bugzilla.suse.com/1160682REPORT
www.suse.com/security/cve/CVE-2019-20372WEB
www.suse.com/support/update/announcement/2020/suse-su-20201171-1/Advisory
bugzilla.suse.com/1150711REPORT
bugzilla.suse.com/1155690REPORT
bugzilla.suse.com/1156202REPORT
access.redhat.com/errata/RHSA-2020:2817Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=1790277REPORT
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2817.jsonAdvisory
access.redhat.com/security/cve/CVE-2019-20372REPORT
www.cve.org/CVERecord?id=CVE-2019-20372AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2019-20372AdvisoryOval
access.redhat.com/errata/RHSA-2020:5495Advisory
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5495.jsonAdvisory
ubuntu.com/security/CVE-2019-20372REPORT
ubuntu.com/security/notices/USN-4235-1Advisory
ubuntu.com/security/notices/USN-4235-2Advisory
security-tracker.debian.org/tracker/CVE-2019-20372Advisory
lists.opensuse.org/archives/…Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities