CVE-2017-7529

原始描述

Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.

受影响的软件

• nginx = 0.5.6 - 1.13.2≥ 0.5.6 ≤ 1.12.1≥ 1.13.0 ≤ 1.13.2 仓库或软件包匹配

详情

发布日期

2017-07-13

最后修改

2024-09-17

CVSS 向量

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-190

EPSS（30 天内被利用概率）

62.60% (百分位 99)

参考资料

• cve.org/CVE-2017-7529
• nvd.nist.gov/vuln/detail/CVE-2017-7529
• mailman.nginx.org/pipermail/nginx-announce/2017/000200.html
• access.redhat.com/errata/RHSA-2017:2538
• www.securityfocus.com/bid/99534
• www.securitytracker.com/id/1039238
• puppet.com/security/cve/cve-2017-7529
• support.apple.com/kb/HT212818
• seclists.org/fulldisclosure/2021/Sep/36