High
Security advisory
Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2017-7529
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 06:27 UTC · Revision 1
Source evidence
Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.
osv:CVE-2017-7529
Complete source record
{
"id": "17bec354ebd359e8c29075fd934fb962d313cddbbaaba688fc3c304002569c07",
"url": "https://osv.dev/vulnerability/CVE-2017-7529",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2017-7529",
"summary": "Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.",
"evidence": "osv:CVE-2017-7529",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2017-7529",
"aliases": [
"CVE-2017-7529"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/nginx/nginx",
"type": "GIT",
"events": [
{
"introduced": "b9040d7ef056a816006c3cf40d08745cd8c1d878"
},
{
"last_affected": "f1f2497e7affaa56189b8fdd165afaf05d20579e"
},
{
"introduced": "0cb7be3c715fd6b85227610c654c9b8f6f7ae666"
},
{
"last_affected": "2b6b360b83924ec98137990ad14f64b4cf8448f2"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0.5.6"
},
{
"last_affected": "1.12.1"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.13.0"
},
{
"last_affected": "1.13.2"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"release-1.12.1",
"release-1.13.2",
"release-1.13.1",
"release-1.13.0",
"release-1.12.0",
"release-1.11.13",
"release-1.11.12",
"release-1.11.11",
"release-1.11.10",
"release-1.11.9",
"release-1.11.8",
"release-1.11.7",
"release-1.11.6",
"release-1.11.5",
"release-1.11.4",
"release-1.11.3",
"release-1.11.2",
"release-1.11.1",
"release-1.11.0",
"release-1.9.15",
"release-1.9.14",
"release-1.9.13",
"release-1.9.12",
"release-1.9.11",
"release-1.9.10",
"release-1.9.9",
"release-1.9.8",
"release-1.9.7",
"release-1.9.6",
"release-1.9.5",
"release-1.9.4",
"release-1.9.3",
"release-1.9.2",
"release-1.9.1",
"release-1.9.0",
"release-1.7.12",
"release-1.7.11",
"release-1.7.10",
"release-1.7.9",
"release-1.7.8",
"release-1.7.7",
"release-1.7.6",
"release-1.7.5",
"release-1.7.4",
"release-1.7.3",
"release-1.7.2",
"release-1.7.1",
"release-1.7.0",
"release-1.5.13",
"release-1.5.12",
"release-1.5.11",
"release-1.5.10",
"release-1.5.9",
"release-1.5.8",
"release-1.5.7",
"release-1.5.6",
"release-1.5.5",
"release-1.5.4",
"release-1.5.3",
"release-1.5.2",
"release-1.5.1",
"release-1.5.0",
"release-1.4.0",
"release-1.3.16",
"release-1.3.15",
"release-1.3.14",
"release-1.3.13",
"release-1.3.12",
"release-1.3.11",
"release-1.3.10",
"release-1.3.9",
"release-1.3.8",
"release-1.3.7",
"release-1.3.6",
"release-1.3.5",
"release-1.3.4",
"release-1.3.3",
"release-1.3.2",
"release-1.3.1",
"release-1.3.0",
"release-1.2.0",
"release-1.1.19",
"release-1.1.18",
"release-1.1.17",
"release-1.1.16",
"release-1.1.15",
"release-1.1.14",
"release-1.1.13",
"release-1.1.12",
"release-1.1.11",
"release-1.1.10",
"release-1.1.9",
"release-1.1.8",
"release-1.1.7",
"release-1.1.6",
"release-1.1.5",
"release-1.1.4",
"release-1.1.3",
"release-1.1.2",
"release-1.1.1",
"release-1.1.0",
"release-1.0.5",
"release-1.0.4",
"release-1.0.3",
"release-1.0.2",
"release-1.0.1",
"release-1.0.0",
"release-0.9.7",
"release-0.9.6",
"release-0.9.5",
"release-0.9.4",
"release-0.9.3",
"release-0.9.2",
"release-0.9.1",
"release-0.9.0",
"release-0.8.53",
"release-0.8.52",
"release-0.8.51",
"release-0.8.50",
"release-0.8.49",
"release-0.8.48",
"release-0.8.47",
"release-0.8.46",
"release-0.8.45",
"release-0.8.44",
"release-0.8.43",
"release-0.8.42",
"release-0.8.41",
"release-0.8.40",
"release-0.8.39",
"release-0.8.38",
"release-0.8.37",
"release-0.8.36",
"release-0.8.35",
"release-0.8.34",
"release-0.8.33",
"release-0.8.32",
"release-0.8.31",
"release-0.8.30",
"release-0.8.29",
"release-0.8.28",
"release-0.8.27",
"release-0.8.26",
"release-0.8.25",
"release-0.8.24",
"release-0.8.23",
"release-0.8.22",
"release-0.8.21",
"release-0.8.20",
"release-0.8.19",
"release-0.8.18",
"release-0.8.17",
"release-0.8.16",
"release-0.8.15",
"release-0.8.14",
"release-0.8.13",
"release-0.8.12",
"release-0.8.11",
"release-0.8.10",
"release-0.8.9",
"release-0.8.8",
"release-0.8.7",
"release-0.8.6",
"release-0.8.5",
"release-0.8.4",
"release-0.8.3",
"release-0.8.2",
"release-0.8.1",
"release-0.8.0",
"release-0.7.59",
"release-0.7.58",
"release-0.7.57",
"release-0.7.56",
"release-0.7.55",
"release-0.7.54",
"release-0.7.53",
"release-0.7.52",
"release-0.7.51",
"release-0.7.50",
"release-0.7.49",
"release-0.7.48",
"release-0.7.47",
"release-0.7.46",
"release-0.7.45",
"release-0.7.44",
"release-0.7.43",
"release-0.7.42",
"release-0.7.41",
"release-0.7.40",
"release-0.7.39",
"release-0.7.38",
"release-0.7.37",
"release-0.7.36",
"release-0.7.35",
"release-0.7.34",
"release-0.7.33",
"release-0.7.32",
"release-0.7.31",
"release-0.7.30",
"release-0.7.29",
"release-0.7.28",
"release-0.7.27",
"release-0.7.26",
"release-0.7.25",
"release-0.7.24",
"release-0.7.23",
"release-0.7.22",
"release-0.7.21",
"release-0.7.20",
"release-0.7.19",
"release-0.7.18",
"release-0.7.17",
"release-0.7.16",
"release-0.7.15",
"release-0.7.14",
"release-0.7.13",
"release-0.7.12",
"release-0.7.11",
"release-0.7.10",
"release-0.7.9",
"release-0.7.8",
"release-0.7.7",
"release-0.7.6",
"release-0.7.5",
"release-0.7.4",
"release-0.7.3",
"release-0.7.2",
"release-0.7.1",
"release-0.7.0",
"release-0.6.31",
"release-0.6.30",
"release-0.6.29",
"release-0.6.28",
"release-0.6.27",
"release-0.6.26",
"release-0.6.25",
"release-0.6.24",
"release-0.6.23",
"release-0.6.22",
"release-0.6.21",
"release-0.6.20",
"release-0.6.19",
"release-0.6.18",
"release-0.6.17",
"release-0.6.16",
"release-0.6.15",
"release-0.6.14",
"release-0.6.13",
"release-0.6.12",
"release-0.6.11",
"release-0.6.10",
"release-0.6.9",
"release-0.6.8",
"release-0.6.7",
"release-0.6.6",
"release-0.6.5",
"release-0.6.4",
"release-0.6.3",
"release-0.6.2",
"release-0.6.1",
"release-0.6.0",
"release-0.5.25",
"release-0.5.24",
"release-0.5.23",
"release-0.5.22",
"release-0.5.21",
"release-0.5.20",
"release-0.5.19",
"release-0.5.18",
"release-0.5.17",
"release-0.5.16",
"release-0.5.15",
"release-0.5.14",
"release-0.5.13",
"release-0.5.12",
"release-0.5.11",
"release-0.5.10",
"release-0.5.9",
"release-0.5.8",
"release-0.5.7",
"release-0.5.6"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-7529.json"
}
}
],
"modified": "2026-10-24T10:30:39.855491860Z",
"provider": "osv",
"references": [
"https://access.redhat.com/errata/RHSA-2017:2538",
"https://puppet.com/security/cve/cve-2017-7529",
"https://support.apple.com/kb/HT212818"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*"
],
"vendor_product": "apple:xcode",
"extracted_events": [
{
"range": [
{
"fixed": "13.0"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*"
],
"vendor_product": "puppet:puppet_enterprise",
"extracted_events": [
{
"range": [
{
"fixed": "2016.4.7"
},
{
"introduced": "2017.1.0"
},
{
"last_affected": "2017.1.1"
},
{
"introduced": "2017.2.1"
},
{
"last_affected": "2017.2.3"
}
],
"source": "CPE_RANGE"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2017-7529",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 434769,
"published_at": "2017-07-13T13:29:00.22+00:00"
}