# CVE-2017-7529

Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.

- Page: https://www.vulneraibility.com/cve/CVE-2017-7529
- CVSS: 7.5
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 62.60% (percentile 99.2)
- Unvetted proof-of-concept code on GitHub: 18 GitHub proofs of concept (first 2017-07-19)
- Weakness: CWE-190
- Published: 2017-07-13

## Affected versions

- nginx: affected 0.5.6 - 1.13.2

A version outside these ranges is not a statement that it is unaffected.

## References

- [other] http://mailman.nginx.org/pipermail/nginx-announce/2017/000200.html
- [advisory] https://access.redhat.com/errata/RHSA-2017:2538
- [other] http://www.securityfocus.com/bid/99534
- [other] http://www.securitytracker.com/id/1039238
- [other] https://puppet.com/security/cve/cve-2017-7529
- [other] https://support.apple.com/kb/HT212818
- [other] http://seclists.org/fulldisclosure/2021/Sep/36

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.