Twenty Year Anniversary

Debian Security Advisory 3908-1

Debian Security Advisory 3908-1
Posted Jul 14, 2017
Authored by Debian | Site debian.org

Debian Linux Security Advisory 3908-1 - An integer overflow has been found in the HTTP range module of Nginx, a high-performance web and reverse proxy server, which may result in information disclosure.

tags | advisory, web, overflow, info disclosure
systems | linux, debian
advisories | CVE-2017-7529
MD5 | 2d367b8f14fc73b9768c34d3df9ea843

Debian Security Advisory 3908-1

Change Mirror Download

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3908-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
July 12, 2017 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : nginx
CVE ID : CVE-2017-7529

An integer overflow has been found in the HTTP range module of Nginx, a
high-performance web and reverse proxy server, which may result in
information disclosure.

For the oldstable distribution (jessie), this problem has been fixed
in version 1.6.2-5+deb8u5.

For the stable distribution (stretch), this problem has been fixed in
version 1.10.3-1+deb9u1.

For the unstable distribution (sid), this problem will be fixed soon.

We recommend that you upgrade your nginx packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAllmk5oACgkQEMKTtsN8
TjYNGw//R3z6dyOTpQ6/ONw0kAi+MekP43AQXuvgBw1GrrHAZRsftfESmnIE0+aQ
vCFBfMBXzK/dkkRDwoT3hzXW/hilJHrbSOYUYnVKiFue1qKd/Vr1GzCf7P5C9hy/
6B1j37dnluJm+EI0pgs9MgE8nfe9CBAkAjL5YZn2/W8cisYUmKQz+BCMgHJjuQc4
rPVZPsCIltvgISUqH2QaFMlLmrZQGQqmVTswX0uiFX5gWgpB8xyAK+Sz8wNVRMzK
xOuXiwH6fp/jbZRjgWPMv47X5H8k9WPf/u1xOLkJo+iADBYyKeQtmJRiqI9+YYv9
vzrPlYCLUK+q4iN+doCnaIsLsoCaZYRz4qVnhSRdDfi/yzVecvVhOio13Pspi7Cb
VSgT1T2iTEDI872criSQA2bqRpGsW9gdIpfV8uxbl78vBoPQgKXKveLFSq+mxxkV
dAtgR746ACCFWkoMMLeWNDJinOxO2TTgGBmYynDFijZ7T3YPtd0XvJZ1v654iM7z
VCAnrfRwW/HiqC+Uz/USsrdYt1i2riGJmOX/irZMy30TwrAl4JMkAvz0wMAdeD59
zfBTpNnJRY6leyuhyhMzu8a+olWuFz5ZU0hu1SsNFvyT5gEtpdFirzyVLYbhXHCN
0wUgLGSydmdf/ndjq4WOu/qgHoCxZrjd8eM1WpCGpv14XdJ+zKk=
=uZZa
-----END PGP SIGNATURE-----

Comments

RSS Feed Subscribe to this comment feed

No comments yet, be the first!

Login or Register to post a comment

File Archive:

September 2018

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Sep 1st
    1 Files
  • 2
    Sep 2nd
    3 Files
  • 3
    Sep 3rd
    15 Files
  • 4
    Sep 4th
    15 Files
  • 5
    Sep 5th
    18 Files
  • 6
    Sep 6th
    18 Files
  • 7
    Sep 7th
    15 Files
  • 8
    Sep 8th
    2 Files
  • 9
    Sep 9th
    2 Files
  • 10
    Sep 10th
    16 Files
  • 11
    Sep 11th
    17 Files
  • 12
    Sep 12th
    15 Files
  • 13
    Sep 13th
    29 Files
  • 14
    Sep 14th
    21 Files
  • 15
    Sep 15th
    3 Files
  • 16
    Sep 16th
    1 Files
  • 17
    Sep 17th
    15 Files
  • 18
    Sep 18th
    16 Files
  • 19
    Sep 19th
    29 Files
  • 20
    Sep 20th
    0 Files
  • 21
    Sep 21st
    0 Files
  • 22
    Sep 22nd
    0 Files
  • 23
    Sep 23rd
    0 Files
  • 24
    Sep 24th
    0 Files
  • 25
    Sep 25th
    0 Files
  • 26
    Sep 26th
    0 Files
  • 27
    Sep 27th
    0 Files
  • 28
    Sep 28th
    0 Files
  • 29
    Sep 29th
    0 Files
  • 30
    Sep 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2018 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close