CVEvulnerability
CVE-2017-7529
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-07-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-190
Description
Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.
Affected configurations
• f5 nginx (>= 0.5.6 <= 1.12.1)
• f5 nginx (>= 1.13.0 <= 1.13.2)
• puppet puppet enterprise (< 2016.4.7)
• puppet puppet enterprise (>= 2017.1.0 <= 2017.1.1)
• puppet puppet enterprise (>= 2017.2.1 <= 2017.2.3)
• apple xcode (< 13.0)
Related
Weakness · CWE (1)
- CWE-190 Integer Overflow or Wraparound weakness
References
- http://mailman.nginx.org/pipermail/nginx-announce/2017/000200.html Vendor Advisory
- http://seclists.org/fulldisclosure/2021/Sep/36 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/99534 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039238 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2017:2538 Third Party Advisory
- https://puppet.com/security/cve/cve-2017-7529 Third Party Advisory
- https://support.apple.com/kb/HT212818 Third Party Advisory
- http://mailman.nginx.org/pipermail/nginx-announce/2017/000200.html Vendor Advisory
- http://seclists.org/fulldisclosure/2021/Sep/36 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/99534 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039238 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2017:2538 Third Party Advisory
- https://puppet.com/security/cve/cve-2017-7529 Third Party Advisory
- https://support.apple.com/kb/HT212818 Third Party Advisory