Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2017-7529 →
DEBIAN-CVE-2017-7529
Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into lea...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
nginx
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-1"}]}]
Debian:13
nginx
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-1"}]}]
Debian:14
nginx
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-1"}]}]
Références
- advisory security-tracker.debian.org