CVE-2020-21699

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-21699
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-21699.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-21699
Published
2023-08-22T19:16:15.847Z
Modified
2026-07-08T20:29:33.770500Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

The web server Tengine 2.2.2 developed in the Nginx version from 0.5.6 thru 1.13.2 is vulnerable to an integer overflow vulnerability in the nginx range filter module, resulting in the leakage of potentially sensitive information triggered by specially crafted requests.

References

Affected packages

Git / github.com/alibaba/tengine

Affected ranges

Type
GIT
Repo
https://github.com/alibaba/tengine
Events
Introduced
52fff0eb7d8dd7d789e810de433d164aebf39433
Last affected
52fff0eb7d8dd7d789e810de433d164aebf39433
Database specific 
{
    "cpe": "cpe:2.3:a:alibaba:tengine:2.2.2:*:*:*:*:nginx:*:*",
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "2.2.2"
        },
        {
            "last_affected": "2.2.2"
        }
    ]
}

Affected versions

2.*
2.2.2
tengine-2.*
tengine-2.2.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-21699.json"