Summary
It was discovered that an integer overflow existed in the range filter
feature of nginx. A remote attacker could use this to expose
sensitive information.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | nginx | 1.4.6-1ubuntu3.8 |
| Ubuntu · 16.04 LTS 16.04:LTS | nginx | 1.10.3-0ubuntu0.16.04.2 |
Vulnerabilities 1
-
Unscored —
Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range f…
References
-
report
https://ubuntu.com/security/CVE-2017-7529