Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in NGINX und NGINX NGINX Plus ausnutzen, um einen Denial of Service Angriff durchzuführen.
Product
NGINX ist eine Webserver-, Reverse Proxy- und E-Mail-Proxy Software.
NGINX Plus ist die kommerzielle Variante von NGINX, einer Webserver-, Reverse Proxy- und E-Mail Proxy Software.
Vulnerabilities 2
-
High 7.5
NGINX HTTP/3 QUIC vulnerability
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer t…
-
High 7.5
NGINX HTTP/3 QUIC vulnerability
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer t…
Revision history
-
#2
Neue Updates von Gentoo aufgenommen
-
#1
Initiale Fassung
References
-
Nginx Security Advisory vom 2024-02-14
https://mailman.nginx.org/pipermail/nginx-announce/2024/NW6MNW34VZ6HDIHH5YFBIJYZJN7FGNAV.html
-
Nginx Blog vom 2024-02-14
https://www.nginx.com/blog/updating-nginx-for-the-vulnerabilities-in-the-http-3-module/
-
F5 Security Advisory vom 2024-02-14
https://my.f5.com/manage/s/article/K000138444
-
F5 Security Advisory vom 2024-02-14
https://my.f5.com/manage/s/article/K000138445
-
Gentoo Linux Security Advisory GLSA-202409-32 vom 2024-09-28
https://security.gentoo.org/glsa/202409-32