Ubuntu update for nginx

Published: 2017-07-14 | Updated: 2023-12-19

Risk	Medium
Patch available	YES
Number of vulnerabilities	1
CVE-ID	CVE-2017-7529
CWE-ID	CWE-190
Exploitation vector	Network
Public exploit	Public exploit code for vulnerability #1 is available.
Vulnerable software Subscribe	Ubuntu Operating systems & Components / Operating system
Vendor	Canonical Ltd.

Security Bulletin

This security bulletin contains one medium risk vulnerability.

1) Integer overflow

EUVDB-ID: #VU7410

Risk: Medium

CVSSv3.1: 7.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C]

CVE-ID: CVE-2017-7529

CWE-ID: CWE-190 - Integer overflow

Exploit availability: Yes

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to integer overflow when processing specially crafted requests. A remote attacker can send a malicious request to vulnerable server and gain access to potentially sensitive information.

When using nginx with standard modules this allows an attacker to obtain a cache file header if a response was returned from cache. In some configurations a cache file header may contain IP address of the backend server or other sensitive information.

Mitigation

Update the affected packages.

Ubuntu 17.04:

nginx-extras 1.10.3-1ubuntu3.1

nginx-full 1.10.3-1ubuntu3.1

nginx-common 1.10.3-1ubuntu3.1

nginx-light 1.10.3-1ubuntu3.1

nginx-core 1.10.3-1ubuntu3.1

Ubuntu 16.10:

nginx-extras 1.10.1-0ubuntu1.3

nginx-full 1.10.1-0ubuntu1.3

nginx-common 1.10.1-0ubuntu1.3