根据其服务器响应标头，安装的 nginx 为低于 1.12.1 的版本，或是低于 1.13.3 的 1.13.x 版。
因此，该应用程序在范围筛选器模块中受到整数溢出漏洞的影响。未经身份验证的远程攻击者可利用此漏洞，通过特别构建的请求泄露潜在的敏感信息。

根据其自我报告的版本，安装的 Nginx Plus 版本低于 R13（基于开源版本 1.13.4 构建）。因此，该应用程序在范围筛选器模块中受到整数溢出漏洞的影响。未经身份验证的远程攻击者可利用此漏洞，通过特别构建的请求泄露潜在的敏感信息。

According to its Server response header, the installed version of nginx is prior to 1.12.1 or 1.13.x prior to 1.13.3.
It is, therefore, affected by an integer overflow vulnerability in the range filter module. An unauthenticated, remote attacker can exploit this, via a specially crafted request to disclose potentially sensitive information.

An integer overflow has been found in the HTTP range module of Nginx, a high-performance web and reverse proxy server, which may result in information disclosure.

It was discovered that there was vulnerability in the range filter of nginx, a web/proxy server. A specially crafted request might result in an integer overflow and incorrect processing of HTTP ranges, potentially resulting in a sensitive information leak.

For Debian 7 'Wheezy', this issue has been fixed in nginx version 1.2.1-2.2+wheezy4+deb7u1.

We recommend that you upgrade your nginx packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3352-1 advisory.

    It was discovered that an integer overflow existed in the range filter feature of nginx. A remote attacker     could use this to expose sensitive information.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x prior to 7.1.26 or 8.0.x prior to 8.1.13 or 8.1.x prior to 8.1.13 or 9.0.x prior to 9.0.6. It is, therefore, affected by a vulnerability.

  - Nginx versions since 0.5.6 up to and including 1.13.2     are vulnerable to integer overflow vulnerability in     nginx range filter module resulting into leak of     potentially sensitive information triggered by specially     crafted request. (CVE-2017-7529)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5862 advisory.

    - Adress CVE-2019-9511
    - Adress CVE-2018-16845
    - Adress CVE-2017-7529
    - Adress CVE-2019-9511
    - Adress CVE-2018-16845

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to it's self reported version, the installed version of Nginx Plus is prior to R13 (built on Open Source version 1.13.4). It is, therefore, affected by an integer overflow vulnerability in the range filter module. An unauthenticated, remote attacker can exploit this, via a specially crafted request to disclose potentially sensitive information.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
118151	Nginx 数据泄露漏洞	Nessus	Web Servers	2018/10/16	2025/4/15	high
161695	Nginx Plus > R13 数据泄露漏洞	Nessus	Web Servers	2022/5/31	2025/4/15	high
118151	nginx Data Disclosure Vulnerability	Nessus	Web Servers	2018/10/16	2025/4/15	high
101490	Debian DSA-3908-1 : nginx - security update	Nessus	Debian Local Security Checks	2017/7/13	2021/1/4	high
101535	Debian DLA-1024-1 : nginx security update	Nessus	Debian Local Security Checks	2017/7/14	2021/1/11	high
101546	Ubuntu 14.04 LTS / 16.04 LTS : nginx vulnerability (USN-3352-1)	Nessus	Ubuntu Local Security Checks	2017/7/14	2024/8/27	high
138072	Palo Alto Networks PAN-OS 7.1.x < 7.1.26 / 8.0.x < 8.1.13 / 8.1.x < 8.1.13 / 9.0.x < 9.0.6 Vulnerability	Nessus	Palo Alto Local Security Checks	2020/7/2	2025/4/15	high
140926	Oracle Linux 7 : olcne / nginx (ELSA-2020-5862)	Nessus	Oracle Linux Local Security Checks	2020/9/28	2025/4/15	high
161695	Nginx Plus > R13 Data Disclosure Vulnerability	Nessus	Web Servers	2022/5/31	2025/4/15	high

检测

插件搜索

high

high

high

high

high

high

high

high

high