High severity7.5NVD Advisory· Published Jul 13, 2017· Updated Jun 17, 2026
CVE-2017-7529
CVE-2017-7529
Description
Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8- cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*Range: <2016.4.7
- osv-coords5 versionspkg:rpm/opensuse/nginx&distro=openSUSE%20Tumbleweedpkg:rpm/suse/nginx-1.0&distro=SUSE%20Lifecycle%20Management%20Server%201.3pkg:rpm/suse/nginx-1.0&distro=SUSE%20Studio%20Onsite%201.3pkg:rpm/suse/nginx-1.0&distro=SUSE%20WebYast%201.3pkg:rpm/suse/nginx&distro=SUSE%20Package%20Hub%2012
< 1.21.3-1.4+ 4 more
- (no CPE)range: < 1.21.3-1.4
- (no CPE)range: < 1.0.15-0.35.3.1
- (no CPE)range: < 1.0.15-0.35.3.1
- (no CPE)range: < 1.0.15-0.35.3.1
- (no CPE)range: < 1.13.9-12.1
Patches
Vulnerability mechanics
References
7- mailman.nginx.org/pipermail/nginx-announce/2017/000200.htmlnvdVendor Advisory
- seclists.org/fulldisclosure/2021/Sep/36nvdMailing ListThird Party Advisory
- www.securityfocus.com/bid/99534nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1039238nvdThird Party AdvisoryVDB Entry
- access.redhat.com/errata/RHSA-2017:2538nvdThird Party Advisory
- puppet.com/security/cve/cve-2017-7529nvdThird Party Advisory
- support.apple.com/kb/HT212818nvdThird Party Advisory
News mentions
0No linked articles in our index yet.