{"schemaVersion":3,"id":"USN-5371-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"nginx vulnerabilities\n\nIt was discovered that nginx Lua module mishandled certain inputs.\nAn attacker could possibly use this issue to perform an HTTP Request\nSmuggling attack. This issue was fixed for Ubuntu 18.04 LTS and\nUbuntu 20.04 LTS. (CVE-2020-11724)\n\nIt was discovered that nginx Lua module mishandled certain inputs.\nAn attacker could possibly use this issue to disclose sensitive\ninformation. This issue only affects Ubuntu 18.04 LTS and\nUbuntu 20.04 LTS. (CVE-2020-36309)\n\nIt was discovered that nginx mishandled the use of\ncompatible certificates among multiple encryption protocols.\nIf a remote attacker were able to intercept the communication,\nthis issue could be used to redirect traffic between subdomains.\n(CVE-2021-3618)","dates":{"published":"2022-04-12T15:48:57.000Z","modified":"2026-06-25T13:31:07.553Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"nginx","name":"nginx","label":"nginx","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/nginx","purlType":"deb","versions":[{"text":"< 1.10.3-0ubuntu0.16.04.5+esm3","noFixRecorded":false,"fixedIn":null},{"text":"< 1.14.0-0ubuntu1.10","noFixRecorded":false,"fixedIn":null},{"text":"< 1.18.0-0ubuntu1.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.10.3-0ubuntu0.16.04.5+esm3 | < 1.14.0-0ubuntu1.10 | < 1.18.0-0ubuntu1.3","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-5371-1","label":"ubuntu.com/security/notices/USN-5371-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-11724","label":"ubuntu.com/security/CVE-2020-11724","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2020-36309","label":"ubuntu.com/security/CVE-2020-36309","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-3618","label":"ubuntu.com/security/CVE-2021-3618","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2020-11724","CVE-2020-36309","CVE-2021-3618"],"downstream":[],"duplicates":[],"related":["CVE-2020-11724","CVE-2020-36309","CVE-2021-3618"]},"timeline":[{"kind":"published","date":"2022-04-12T15:48:57.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-25T13:31:07.553Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T14:47:51.147Z","stale":false,"partial":false}}