NetSight
IP …
high7.5

CVE-2017-7529

Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of pote…

Impact

Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.

Affected products

VendorProductAffected versions
F5Nginx
from 0.5.6 through 1.12.1
from 1.13.0 through 1.13.2
PuppetPuppet Enterprise
before 2016.4.7
from 2017.1.0 through 2017.1.1
from 2017.2.1 through 2017.2.3
AppleXcode
before 13.0

Weakness classification

CWE-190

References