CVE-2017-7529CWE-190

CVE-2017-7529: vulnerability in nginx

Published · Updated

Follow this CVE+ Monitor nginx+ Monitor nginx

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

15Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 63%
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Affected
1 product (2 components)
Red Hat Software Collections
no_fix_planned: Will not fix
Fixed
6 products (48 components)
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) · Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) · Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) · Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) · Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) · and others 1
fix ↗
Not affected
1 product (7 components) — because the vulnerable code is not present in the product
Red Hat Software Collections
Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.
Affected products
nginx · nginx
Related CVEs — nginx

In the same product, most dangerous first.

CVE-2011-4968—CVE-2011-4968EPSS 4.0%