VULNERABILITY INTELLIGENCE

CVE-2017-7529

CVSS score7.5 HIGH
EPSS probability62.60%
CISA KEVNot currently listed
Published2017-07-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.

Weakness classification

  • CWE-190: Integer Overflow or Wraparound

Primary references