CVE-2017-20005

CVE-2017-20005 describes a critical buffer overflow vulnerability in NGINX versions prior to 1.13.6, specifically affecting the autoindex module when processing files with modification dates exceeding four digits, such as those from 1969 which trigger an integer overflow. This vulnerability carries a CVSS score of 9.8 (Critical), indicating a network-exploitable flaw with low attack complexity that can lead to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit or ExploitDB, the vulnerability has garnered some community discussion and limited media coverage.