#VU7410 Integer overflow in nginx - CVE-2017-7529

Vulnerability identifier: #VU7410

Vulnerability risk: Medium

CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/U:Green

CVE-ID: CVE-2017-7529

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: Public exploit is available

Vulnerable software:
nginx

Software vendor:
F5 Networks

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to integer overflow when processing specially crafted requests. A remote attacker can send a malicious request to vulnerable server and gain access to potentially sensitive information.
 
When using nginx with standard modules this allows an attacker to obtain a cache file header if a response was returned from cache. In some configurations a cache file header may contain IP address of the backend server or other sensitive information.

Update to version 1.13.3 or 1.12.1.

• http://nginx.org/en/CHANGES
• http://mailman.nginx.org/pipermail/nginx-announce/2017/000200.html