{"id":"CVE-2017-7529","aliases":["ALPINE-CVE-2017-7529","BELL-CVE-2017-7529","CLSA-2026-1776791328","CLSA-2026-1776791510","DEBIAN-CVE-2017-7529","DLA-1024-1","DSA-3908-1","EUVD-2017-16545","GHSA-85mj-h68w-w736","MGASA-2017-0231","RHSA-2017:2538","SUSE-SU-2017:2387-1","UBUNTU-CVE-2017-7529","USN-3352-1","openSUSE-SU-2018:0813-1","openSUSE-SU-2024:11092-1","openSUSE-SU-2024:11341-1"],"status":"published","title":"Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow...","description":"Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.62597,"percentile":0.99197,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-190"],"published":"2017-07-11T00:00:00Z","modified":"2026-10-24T10:30:39Z","exploits":[{"source":"pocgithub","id":"liusec/CVE-2017-7529","title":"liusec/CVE-2017-7529","date":"2017-07-19","url":"https://github.com/liusec/CVE-2017-7529"},{"source":"pocgithub","id":"en0f/CVE-2017-7529_PoC","title":"en0f/CVE-2017-7529_PoC","date":"2018-06-20","url":"https://github.com/en0f/CVE-2017-7529_PoC"},{"source":"pocgithub","id":"cved-sources/cve-2017-7529","title":"cved-sources/cve-2017-7529","date":"2019-01-17","url":"https://github.com/cved-sources/cve-2017-7529"},{"source":"pocgithub","id":"MaxSecurity/CVE-2017-7529-POC","title":"MaxSecurity/CVE-2017-7529-POC","date":"2019-06-06","url":"https://github.com/MaxSecurity/CVE-2017-7529-POC"},{"source":"pocgithub","id":"cyberk1w1/CVE-2017-7529","title":"cyberk1w1/CVE-2017-7529","date":"2020-06-13","url":"https://github.com/cyberk1w1/CVE-2017-7529"},{"source":"pocgithub","id":"cyberharsh/nginx-CVE-2017-7529","title":"cyberharsh/nginx-CVE-2017-7529","date":"2020-06-24","url":"https://github.com/cyberharsh/nginx-CVE-2017-7529"},{"source":"pocgithub","id":"daehee/nginx-overflow","title":"daehee/nginx-overflow","date":"2020-09-15","url":"https://github.com/daehee/nginx-overflow"},{"source":"pocgithub","id":"gemboxteam/exploit-nginx-1.10.3","title":"gemboxteam/exploit-nginx-1.10.3","date":"2021-01-19","url":"https://github.com/gemboxteam/exploit-nginx-1.10.3"},{"source":"pocgithub","id":"insecrez/Remote-Integer-Overflow-Vulnerability","title":"insecrez/Remote-Integer-Overflow-Vulnerability","date":"2021-01-20","url":"https://github.com/insecrez/Remote-Integer-Overflow-Vulnerability"},{"source":"pocgithub","id":"mo3zj/Nginx-Remote-Integer-Overflow-Vulnerability","title":"mo3zj/Nginx-Remote-Integer-Overflow-Vulnerability","date":"2021-03-31","url":"https://github.com/mo3zj/Nginx-Remote-Integer-Overflow-Vulnerability"},{"source":"pocgithub","id":"fu2x2000/CVE-2017-7529-Nginx---Remote-Integer-Overflow-Exploit","title":"fu2x2000/CVE-2017-7529-Nginx---Remote-Integer-Overflow-Exploit","date":"2021-09-01","url":"https://github.com/fu2x2000/CVE-2017-7529-Nginx---Remote-Integer-Overflow-Exploit"},{"source":"pocgithub","id":"Shehzadcyber/CVE-2017-7529","title":"Shehzadcyber/CVE-2017-7529","date":"2022-07-18","url":"https://github.com/Shehzadcyber/CVE-2017-7529"},{"source":"pocgithub","id":"coolman6942o/-Exploit-CVE-2017-7529","title":"coolman6942o/-Exploit-CVE-2017-7529","date":"2023-12-19","url":"https://github.com/coolman6942o/-Exploit-CVE-2017-7529"},{"source":"pocgithub","id":"SirEagIe/CVE-2017-7529","title":"SirEagIe/CVE-2017-7529","date":"2024-04-25","url":"https://github.com/SirEagIe/CVE-2017-7529"},{"source":"pocgithub","id":"Fenil2511/CVE-2017-7529-POC","title":"Fenil2511/CVE-2017-7529-POC","date":"2025-03-05","url":"https://github.com/Fenil2511/CVE-2017-7529-POC"},{"source":"pocgithub","id":"youngmin0104/CVE-2017-7529-","title":"youngmin0104/CVE-2017-7529-","date":"2025-04-17","url":"https://github.com/youngmin0104/CVE-2017-7529-"},{"source":"pocgithub","id":"portfolio10/nginx","title":"portfolio10/nginx","date":"2025-04-27","url":"https://github.com/portfolio10/nginx"},{"source":"pocgithub","id":"CyberCTF/vulhub-nginx-cve-2017-7529","title":"CyberCTF/vulhub-nginx-cve-2017-7529","date":"2026-10-08","url":"https://github.com/CyberCTF/vulhub-nginx-cve-2017-7529"}],"fixes":[{"ecosystem":"Alpine:v3.10","package":"nginx","fixed_in":["1.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"nginx","fixed_in":["1.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"nginx","fixed_in":["1.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"nginx","fixed_in":["1.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"nginx","fixed_in":["1.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"nginx","fixed_in":["1.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"nginx","fixed_in":["1.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"nginx","fixed_in":["1.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"nginx","fixed_in":["1.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"nginx","fixed_in":["1.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"nginx","fixed_in":["1.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"nginx","fixed_in":["1.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"nginx","fixed_in":["1.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"nginx","fixed_in":["1.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"nginx","fixed_in":["1.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.4","package":"nginx","fixed_in":["1.10.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"nginx","fixed_in":["1.10.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"nginx","fixed_in":["1.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"nginx","fixed_in":["1.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"nginx","fixed_in":["1.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"nginx","fixed_in":["1.12.1-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"nginx","fixed_in":["1.13.3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nginx","fixed_in":["1.13.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nginx","fixed_in":["1.13.3-1"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"nginx","fixed_in":["1.2.1-2.2+wheezy4+deb7u1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"nginx","fixed_in":["1.6.2-5+deb8u5"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"nginx","fixed_in":["1.10.3-1+deb9u1"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"nginx","fixed_in":["1.6.2-5.3.mga5"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"nginx","fixed_in":["1.10.3-1.1.mga6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-nginx110-nginx","fixed_in":["1:1.10.2-8.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-nginx110-nginx-debuginfo","fixed_in":["1:1.10.2-8.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-nginx110-nginx-mod-http-image-filter","fixed_in":["1:1.10.2-8.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-nginx110-nginx-mod-http-perl","fixed_in":["1:1.10.2-8.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-nginx110-nginx-mod-http-xslt-filter","fixed_in":["1:1.10.2-8.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-nginx110-nginx-mod-mail","fixed_in":["1:1.10.2-8.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-nginx110-nginx-mod-stream","fixed_in":["1:1.10.2-8.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-nginx110-nginx","fixed_in":["1:1.10.2-8.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-nginx110-nginx-debuginfo","fixed_in":["1:1.10.2-8.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-nginx110-nginx-mod-http-image-filter","fixed_in":["1:1.10.2-8.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-nginx110-nginx-mod-http-perl","fixed_in":["1:1.10.2-8.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-nginx110-nginx-mod-http-xslt-filter","fixed_in":["1:1.10.2-8.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-nginx110-nginx-mod-mail","fixed_in":["1:1.10.2-8.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-nginx110-nginx-mod-stream","fixed_in":["1:1.10.2-8.el7"],"sources":["osv"]},{"ecosystem":"SUSE:Lifecycle Management Server 1.3","package":"nginx-1.0","fixed_in":["1.0.15-0.35.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Studio Onsite 1.3","package":"nginx-1.0","fixed_in":["1.0.15-0.35.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:WebYast 1.3","package":"nginx-1.0","fixed_in":["1.0.15-0.35.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"nginx","fixed_in":["1.4.6-1ubuntu3.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"nginx","fixed_in":["1.10.3-0ubuntu0.16.04.2"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 12","package":"nginx","fixed_in":["1.13.9-12.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.6"},{"fixed":"1.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.6"},{"fixed":"1.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.6"},{"fixed":"1.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.6"},{"fixed":"1.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.6"},{"fixed":"1.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.6"},{"fixed":"1.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.6"},{"fixed":"1.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.6"},{"fixed":"1.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.6"},{"fixed":"1.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.6"},{"fixed":"1.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.6"},{"fixed":"1.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.6"},{"fixed":"1.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.6"},{"fixed":"1.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.6"},{"fixed":"1.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.6"},{"fixed":"1.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.4","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.6"},{"fixed":"1.10.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.6"},{"fixed":"1.10.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.6"},{"fixed":"1.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.6"},{"fixed":"1.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.6"},{"fixed":"1.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.6"},{"fixed":"1.12.1-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els7"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els7"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els7"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"nginx-mod-http-geoip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els7"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els7"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els7"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els7"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els7"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els7"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els7"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els7"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els7"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"nginx-mod-http-geoip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els7"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els7"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els7"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els7"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els7"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els7"}]}],"bundled":5},{"source":"osv","ecosystem":"Debian:12","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-2.2+wheezy4+deb7u1"}]}],"versions":["1.2.1-2.2","1.2.1-2.2+wheezy1","1.2.1-2.2+wheezy2","1.2.1-2.2+wheezy3","1.2.1-2.2+wheezy3~bpo60+1","1.2.1-2.2+wheezy4"]},{"source":"osv","ecosystem":"Debian:8","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-5+deb8u5"}]}],"versions":["1.6.2-5","1.6.2-5+a.exp1","1.6.2-5+deb8u1","1.6.2-5+deb8u1~bpo70+1","1.6.2-5+deb8u2","1.6.2-5+deb8u2~bpo70+1","1.6.2-5+deb8u3","1.6.2-5+deb8u4"]},{"source":"osv","ecosystem":"Debian:9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-1+deb9u1"}]}],"versions":["1.10.3-1","1.10.3-1+deb9u1~bpo8+1","1.10.3-1+deb9u1~bpo8+2"]},{"source":"osv","ecosystem":"Mageia:5","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-5.3.mga5"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-1.1.mga6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-nginx110-nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.2-8.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-nginx110-nginx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.2-8.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-nginx110-nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.2-8.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-nginx110-nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.2-8.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-nginx110-nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.2-8.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-nginx110-nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.2-8.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-nginx110-nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.2-8.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-nginx110-nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.2-8.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-nginx110-nginx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.2-8.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-nginx110-nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.2-8.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-nginx110-nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.2-8.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-nginx110-nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.2-8.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-nginx110-nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.2-8.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-nginx110-nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.2-8.el7"}]}]},{"source":"osv","ecosystem":"SUSE:Lifecycle Management Server 1.3","package":"nginx-1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.15-0.35.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Studio Onsite 1.3","package":"nginx-1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.15-0.35.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:WebYast 1.3","package":"nginx-1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.15-0.35.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.6-1ubuntu3.8"}]}],"versions":["1.4.1-3ubuntu1","1.4.3-2ubuntu1","1.4.4-1ubuntu1","1.4.4-2ubuntu1","1.4.4-4ubuntu1","1.4.5-1ubuntu1","1.4.6-1ubuntu2","1.4.6-1ubuntu3","1.4.6-1ubuntu3.1","1.4.6-1ubuntu3.2","1.4.6-1ubuntu3.3","1.4.6-1ubuntu3.4","1.4.6-1ubuntu3.5","1.4.6-1ubuntu3.6","1.4.6-1ubuntu3.7"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-0ubuntu0.16.04.2"}]}],"versions":["1.9.3-1ubuntu1","1.9.6-2ubuntu1","1.9.6-2ubuntu2","1.9.9-0ubuntu1","1.9.9-1ubuntu1","1.9.10-0ubuntu1","1.9.10-1ubuntu1","1.9.11-0ubuntu1","1.9.11-0ubuntu2","1.9.12-0ubuntu1","1.9.13-0ubuntu1","1.9.14-0ubuntu1","1.9.15-0ubuntu1","1.10.0-0ubuntu0.16.04.1","1.10.0-0ubuntu0.16.04.2","1.10.0-0ubuntu0.16.04.3","1.10.0-0ubuntu0.16.04.4","1.10.3-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.6-1ubuntu3.8"}]}],"versions":["1.4.1-3ubuntu1","1.4.3-2ubuntu1","1.4.4-1ubuntu1","1.4.4-2ubuntu1","1.4.4-4ubuntu1","1.4.5-1ubuntu1","1.4.6-1ubuntu2","1.4.6-1ubuntu3","1.4.6-1ubuntu3.1","1.4.6-1ubuntu3.2","1.4.6-1ubuntu3.3","1.4.6-1ubuntu3.4","1.4.6-1ubuntu3.5","1.4.6-1ubuntu3.6","1.4.6-1ubuntu3.7"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-0ubuntu0.16.04.2"}]}],"versions":["1.9.3-1ubuntu1","1.9.6-2ubuntu1","1.9.6-2ubuntu2","1.9.9-0ubuntu1","1.9.9-1ubuntu1","1.9.10-0ubuntu1","1.9.10-1ubuntu1","1.9.11-0ubuntu1","1.9.11-0ubuntu2","1.9.12-0ubuntu1","1.9.13-0ubuntu1","1.9.14-0ubuntu1","1.9.15-0ubuntu1","1.10.0-0ubuntu0.16.04.1","1.10.0-0ubuntu0.16.04.2","1.10.0-0ubuntu0.16.04.3","1.10.0-0ubuntu0.16.04.4","1.10.3-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.9-12.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.3-1.4"}]}],"bundled":7}],"products":[{"vendor":"apple","product":"xcode"},{"vendor":"f5","product":"nginx"},{"vendor":"nginx","product":"nginx"},{"vendor":"puppet","product":"puppet_enterprise"}],"references":[{"url":"http://mailman.nginx.org/pipermail/nginx-announce/2017/000200.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Vendor Advisory","advisory","web","article","report"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2538","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/99534","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.securitytracker.com/id/1039238","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://puppet.com/security/cve/cve-2017-7529","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/kb/HT212818","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2021/Sep/36","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7529","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-85mj-h68w-w736"},{"url":"https://security.alpinelinux.org/vuln/CVE-2017-7529","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2017-7529","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1776791328.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1776791510.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-7529","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0231.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21227","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1468584","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2538.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7529","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7529","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172387-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1048265","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7529","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-7529","tags":["report"]},{"url":"http://nginx.org/download/patch.2017.ranges.txt","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3352-1","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1057831","tags":["report"]},{"url":"https://bugzilla.suse.com/1059685","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12029","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-7529","description":"Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.","status":"published","published":"2017-07-13T13:00:00Z","modified":"2024-09-16T18:39:56.411Z","cwes":["CWE-190"],"updated_at":"2026-11-02T14:33:20.843976Z"}],"euvd":[{"id":"EUVD-2017-16545","description":"Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.","status":"published","published":"2017-07-13T13:00:00Z","modified":"2024-09-16T18:39:56Z","updated_at":"2026-11-03T00:55:30.209098Z"}],"ghsa":[{"id":"GHSA-85mj-h68w-w736","title":"Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow...","description":"Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.","status":"published","published":"2022-05-13T01:04:15Z","modified":"2023-02-01T05:02:44Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:49:57.916243Z"}],"nvd":[{"id":"CVE-2017-7529","description":"Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.","status":"published","published":"2017-07-13T13:29:00.22Z","modified":"2026-06-17T01:24:32.47Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:03:54.012105Z"}],"osv":[{"id":"ALPINE-CVE-2017-7529","description":"Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.","status":"published","published":"2017-07-13T13:29:00.22Z","modified":"2026-07-08T04:31:15.467217186Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:27:47.187336Z"},{"id":"BELL-CVE-2017-7529","title":"CVE-2017-7529 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:07.145802Z","modified":"2026-01-26T09:48:42.6378Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:14.137943Z"},{"id":"CVE-2017-7529","description":"Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.","status":"published","published":"2017-07-13T13:29:00.22Z","modified":"2026-10-24T10:30:39.85549186Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:06.412595Z"},{"id":"DEBIAN-CVE-2017-7529","description":"Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.","status":"published","published":"2017-07-13T13:29:00.22Z","modified":"2026-09-01T20:03:50.161982848Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:29.412243Z"},{"id":"RHSA-2017:2538","title":"Red Hat Security Advisory: rh-nginx110-nginx security update","status":"published","published":"2024-09-13T12:01:02Z","modified":"2026-06-29T10:17:30Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"UBUNTU-CVE-2017-7529","description":"Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.","status":"published","published":"2017-07-11T00:00:00Z","modified":"2026-02-04T04:24:40.206343Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:15.773974Z"},{"id":"CLSA-2026-1776791328","title":"nginx: Fix of 5 CVEs","description":"- CVE-2017-7529: fix integer overflow in range filter\n- CVE-2018-16843: fix excessive memory consumption in HTTP/2\n- CVE-2018-16844: fix excessive CPU usage in HTTP/2\n- CVE-2019-9511: fix excessive memory growth via HTTP/2 DATA\n  frame manipulation\n- CVE-2019-9513: fix excessive CPU usage via HTTP/2 PRIORITY\n  frame manipulation","status":"published","published":"2026-04-21T17:08:54Z","modified":"2026-06-01T00:32:20.356785436Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1776791510","title":"nginx: Fix of 5 CVEs","description":"- CVE-2017-7529: fix integer overflow in range filter\n- CVE-2018-16843: fix excessive memory consumption in HTTP/2\n- CVE-2018-16844: fix excessive CPU usage in HTTP/2\n- CVE-2019-9511: fix excessive memory growth via HTTP/2 DATA\n  frame manipulation\n- CVE-2019-9513: fix excessive CPU usage via HTTP/2 PRIORITY\n  frame manipulation","status":"published","published":"2026-04-21T17:11:55Z","modified":"2026-06-01T00:33:03.795460304Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"DLA-1024-1","title":"nginx - security update","status":"published","published":"2017-07-13T00:00:00Z","modified":"2026-03-09T01:01:31.585538Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-3908-1","title":"nginx - security update","status":"published","published":"2017-07-12T00:00:00Z","modified":"2026-03-09T01:20:25.360654Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2017-0231","title":"Updated nginx packages fix security vulnerability","description":"A security issue was identified in nginx range filter.  A specially\ncrafted request might result in an integer overflow and incorrect\nprocessing of ranges, potentially resulting in sensitive information\nleak (CVE-2017-7529).\n","status":"published","published":"2017-07-30T15:58:51Z","modified":"2026-04-16T06:23:00.707363969Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2018:0813-1","title":"Security update for nginx","description":"This update for nginx to version 1.13.9 fixes the following issues:\n\n- CVE-2017-7529: nginx: Integer overflow in nginx range filter module allowed memory disclosure (bsc#1048265)\n\nThis update also contains all updates and improvements in 1.13.9 upstream release.\n","status":"published","published":"2018-03-26T10:15:33Z","modified":"2026-02-04T04:01:47.821511Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2024:11092-1","title":"nginx-1.21.3-1.4 on GA media","description":"These are all security issues fixed in the nginx-1.21.3-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:16:09.585703Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:11341-1","title":"ruby2.7-rubygem-passenger-6.0.8-3.2 on GA media","description":"These are all security issues fixed in the ruby2.7-rubygem-passenger-6.0.8-3.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:39:43.862306Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2017:2387-1","title":"Security update for nginx-1.0","description":"This update for NGINX fixes the following issues:\n\nSecurity issue fixed:\n- CVE-2017-7529: Integer overflow in nginx range filter module leading to memory disclosure. (bsc#1048265)\n","status":"published","published":"2017-09-07T14:38:39Z","modified":"2026-02-04T02:56:05.42374Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"USN-3352-1","title":"nginx vulnerability","description":"It was discovered that an integer overflow existed in the range filter\nfeature of nginx. A remote attacker could use this to expose\nsensitive information.\n","status":"published","published":"2017-07-13T18:38:55Z","modified":"2026-02-10T04:41:09Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}