When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate.
Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3 https://nginx.org/en/docs/quic.html .
NOTE: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: f5
Published: 2024-02-14T16:30:26.081Z
Updated: 2024-08-01T23:36:21.189Z
Reserved: 2024-02-02T00:32:55.375Z
Link: CVE-2024-24989
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2024-02-14T17:15:15.513
Modified: 2024-11-21T09:00:05.640
Link: CVE-2024-24989
Redhat