Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: F5 NGINX Open Source, NGINX Plus 1.26.1, R32 Clear all filters
TI-2024-22608 CVE-2024-34161

NGINX HTTP/3 QUIC vulnerability

Priority LOW 32

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module and the network infrastructure supports a Maximum Transmission Unit (MTU) of 4096 or greater without fragmentation, undisclosed QUIC packets can c…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00867 Published 2024-05-29 Fixed in 1.26.1, R32 CWE-416
TI-2024-23272 CVE-2024-35200

NGINX HTTP/3 QUIC vulnerability

Priority LOW 32

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 requests can cause NGINX worker processes to terminate.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00934 Published 2024-05-29 Fixed in 1.26.1, R32 CWE-476
TI-2024-21634 CVE-2024-32760

NGINX HTTP/3 QUIC vulnerability

Priority LOW 36

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 encoder instructions can cause NGINX worker processes to terminate or cause or other potential impact.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00864 Published 2024-05-29 Fixed in 1.26.1, R32 CWE-787
TI-2024-20468 CVE-2024-31079

NGINX HTTP/3 QUIC vulnerability

Priority LOW 30

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 requests can cause NGINX worker processes to terminate or cause other potential impact.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00888 Published 2024-05-29 Fixed in 1.26.1, R32 CWE-121