vulnerability

Amazon Linux AMI: CVE-2017-7529: Security patch for nginx (ALAS-2017-894)

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:N)
Published
Jul 11, 2017
Added
Sep 15, 2017
Modified
Oct 14, 2022

Description

Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.

Solution

amazon-linux-upgrade-nginx
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.