{"id":"CVE-2017-7529","published":"2017-07-13T13:00:00Z","modified":"2024-09-16T18:39:56Z","title":"Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range…","vendor":"nginx","product":"nginx","tier":"core","eol":null,"affectedVersions":[{"vendor":"nginx","product":"nginx","versions":["0.5.6 - 1.13.2"]}],"description":{"text":"Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw is an integer overflow in the range filter module of nginx, affecting versions from 0.5.6 through 1.13.2. Remote attackers can trigger it with a specially crafted HTTP request, which may leak potentially sensitive information from the server.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:13:37Z"},"cvss":null,"epss":{"score":0.62597,"percentile":0.99191,"date":"2026-10-31","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":null,"cwes":[{"id":"CWE-190","name":"Integer Overflow or Wraparound"}],"references":[{"url":"http://mailman.nginx.org/pipermail/nginx-announce/2017/000200.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2538","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.securityfocus.com/bid/99534","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.securitytracker.com/id/1039238","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://puppet.com/security/cve/cve-2017-7529","tags":["x_refsource_CONFIRM"]},{"url":"https://support.apple.com/kb/HT212818","tags":["x_refsource_CONFIRM"]},{"url":"http://seclists.org/fulldisclosure/2021/Sep/36","tags":["mailing-list","x_refsource_FULLDISC"]}],"techniques":[{"id":"T1190","name":"Exploit Public-Facing Application","tactics":["initial-access"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: remote crafted HTTP request to public web server","mappingType":"exploitation_technique","evidence":[{"from":"description","quote":"triggered by specially crafted request","start":189,"end":227}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"},{"id":"T1005","name":"Data from Local System","tactics":["collection"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: leaks sensitive data from server memory","mappingType":"primary_impact","evidence":[{"from":"description","quote":"leak of potentially sensitive information","start":147,"end":188}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[{"id":"SRC-b804e28bf5894dd4955f","title":"Whitepaper Name Goes","publisher":"trustwave.com","url":"https://www.trustwave.com/hubfs/Web/Library/Documents_pdf/Trustwave_SpiderLabs_2023_Hospitality_Sector_Threat_Landscape.pdf","date":null,"mentions":[{"quote":"vulnerabilities:\r\n▪ ALPACA Attack(CVE-2021-3618)\r\n▪ Apache Tomcat HTTP Request Smuggling (CVE-2021-23017)\r\n▪ Mod_dav module of httpd DoS (CVE-2006-20001)\r\n▪ Mod_proxy module of httpd (CVE-2022-37436)\r\n▪ SQLite DoS vulnerability (CVE-2019-20372)\r\n▪ Jenkins RCE (CVE-2017-20005)\r\n▪ Nginx web server DoS (CVE-2017-7529)","start":45492,"end":45808}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2017-16545","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-16545","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":16,"skipped":2,"earliest":"2017-07-19","earliestUrl":"https://github.com/liusec/CVE-2017-7529","repos":[{"name":"en0f/CVE-2017-7529_PoC","url":"https://github.com/en0f/CVE-2017-7529_PoC","stars":19,"created":"2018-06-20"},{"name":"liusec/CVE-2017-7529","url":"https://github.com/liusec/CVE-2017-7529","stars":16,"created":"2017-07-19"},{"name":"gemboxteam/exploit-nginx-1.10.3","url":"https://github.com/gemboxteam/exploit-nginx-1.10.3","stars":12,"created":"2021-01-19"},{"name":"Shehzadcyber/CVE-2017-7529","url":"https://github.com/Shehzadcyber/CVE-2017-7529","stars":11,"created":"2022-07-18"},{"name":"MaxSecurity/CVE-2017-7529-POC","url":"https://github.com/MaxSecurity/CVE-2017-7529-POC","stars":4,"created":"2019-06-06"}]},"first":{"date":"2017-07-19","source":"PoC-in-GitHub","url":"https://github.com/liusec/CVE-2017-7529"},"provenance":"source"},"exploitRefs":[],"flow":[{"stage":"exploitation","techniques":["T1190"],"provenance":"ai"},{"stage":"primary","techniques":["T1005"],"provenance":"ai"}],"timeline":[{"date":"2017-07-13","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2017-7529","provenance":"source"},{"date":"2017-07-19","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/liusec/CVE-2017-7529","provenance":"source"}],"speed":{"daysToPublicExploit":6,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":28.7,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.84,"detail":"percentile 0.9919"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":5.0,"detail":"16 PoC-in-GitHub repos"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}