CVE-2017-7529

🗓️ 13 Jul 2017 13:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 2067 Views🌐 WEB

Nginx versions 0.5.6 to 1.13.2 vulnerable to integer overflow leading to sensitive info leak

Reporter	Title	Published	Views	Family All 124
IBM Security Bulletins	Security Bulletin: Aspera Applications are affected by a Nginx vulnerability	15 Jun 201807:08	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in nginx affects PowerKVM	18 Jun 201801:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses Remote Integer Buffer Overflow Vulnerability which is vulnerable to CVE-2017-7529	23 Jan 202407:09	–	ibm
ALT Linux	Security fix for the ALT Linux 9 package nginx version 1.12.1-alt1	11 Jul 201700:00	–	altlinux
Gitee	Exploit for Integer Overflow or Wraparound in F5 Nginx	20 Jan 202119:04	–	gitee
GithubExploit	Exploit for Integer Overflow or Wraparound in F5 Nginx	19 Jul 201709:55	–	githubexploit
GithubExploit	Exploit for Integer Overflow or Wraparound in F5 Nginx	20 Jun 201815:16	–	githubexploit
GithubExploit	Exploit for Integer Overflow or Wraparound in F5 Nginx	18 Jul 202205:14	–	githubexploit
GithubExploit	Exploit for Integer Overflow or Wraparound in F5 Nginx	6 Jun 201914:47	–	githubexploit
Amazon	Low: nginx	13 Sep 201700:00	–	amazon

NVD

Vulners

Node

f5 nginxRange0.5.6–1.12.1

f5 nginxRange1.13.0–1.13.2

Node

puppet puppet_enterpriseRange<2016.4.7

puppet puppet_enterpriseRange2017.1.0–2017.1.1

puppet puppet_enterpriseRange2017.2.1–2017.2.3

Node

apple xcodeRange<13.0

[
  {
    "product": "nginx",
    "vendor": "nginx",
    "versions": [
      {
        "status": "affected",
        "version": "0.5.6 - 1.13.2"
      }
    ]
  }
]

Source	Link
mailman	www.mailman.nginx.org/pipermail/nginx-announce/2017/000200.html
access	www.access.redhat.com/errata/RHSA-2017:2538
securityfocus	www.securityfocus.com/bid/99534
seclists	www.seclists.org/fulldisclosure/2021/Sep/36
securitytracker	www.securitytracker.com/id/1039238
support	www.support.apple.com/kb/HT212818
puppet	www.puppet.com/security/cve/cve-2017-7529

Parameter	Position	Path	Description	CWE
Range	header	/	Integer overflow in nginx range filter module can leak information via crafted Range header requests (CVE-2017-7529).	CWE-190

17 Jun 2026 01:24Current

6.5Medium risk

Vulners AI Score6.5

CVSS 25

CVSS 3.17.5

EPSS0.62597

CWE-190