CVE-2017-7529

Description

Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.

References

https://support.apple.com/kb/HT212818

https://puppet.com/security/cve/cve-2017-7529

https://access.redhat.com/errata/RHSA-2017:2538

http://www.securitytracker.com/id/1039238

http://www.securityfocus.com/bid/99534

http://seclists.org/fulldisclosure/2021/Sep/36

http://mailman.nginx.org/pipermail/nginx-announce/2017/000200.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3