An issue was discovered in OpenResty before 1.15.8.4. ngx_http_lua_subrequest.c allows HTTP request smuggling, as demonstrated by the ngx.location.capture API.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5371-3 advisory.

    USN-5371-1 and USN-5371-2 fixed several vulnerabilities in nginx. This update provides the corresponding     update for CVE-2020-11724 for Ubuntu 16.04 ESM.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5371-1 advisory.

    It was discovered that nginx Lua module mishandled certain inputs. An attacker could possibly use this     issue to perform an HTTP Request Smuggling attack. This issue was fixed for Ubuntu 18.04 LTS and Ubuntu     20.04 LTS. (CVE-2020-11724)

    It was discovered that nginx Lua module mishandled certain inputs. An attacker could possibly use this     issue to disclose sensitive information. This issue only affects Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
    (CVE-2020-36309)

    It was discovered that nginx mishandled the use of

    compatible certificates among multiple encryption protocols.

    If a remote attacker were able to intercept the communication,

    this issue could be used to redirect traffic between subdomains. (CVE-2021-3618)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It was reported that the Lua module for Nginx, a high-performance web and reverse proxy server, is prone to a HTTP request smuggling vulnerability.

An HTTP request smuggling issue was discovered in the ngx_lua plugin for nginx, a high-performance web and reverse proxy server, as demonstrated by the ngx.location.capture API.

For Debian 9 stretch, this problem has been fixed in version 1.10.3-1+deb9u5.

We recommend that you upgrade your nginx packages.

For the detailed security status of nginx please refer to its security tracker page at: https://security-tracker.debian.org/tracker/nginx

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
165813	Ubuntu 16.04 ESM : nginx vulnerability (USN-5371-3)	Nessus	Ubuntu Local Security Checks	high
159690	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : nginx vulnerabilities (USN-5371-1)	Nessus	Ubuntu Local Security Checks	high
139878	Debian DSA-4750-1 : nginx - security update	Nessus	Debian Local Security Checks	high
138782	Debian DLA-2283-1 : nginx security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2020-11724

high

Tenable Plugins

high

high

high

high