Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in NGINX NGINX Plus ausnutzen, um einen Denial of Service Angriff durchzuführen.
Product
NGINX Plus ist die kommerzielle Variante von NGINX, einer Webserver-, Reverse Proxy- und E-Mail Proxy Software.
Vulnerabilities 4
-
Medium 6.5
NGINX HTTP/3 QUIC vulnerability
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 encoder instructions can cause NGINX worker processes to terminate or cause or other potential impact.
-
Medium 5.3
NGINX HTTP/3 QUIC vulnerability
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module and the network infrastructure supports a Maximum Transmission Unit (MTU) of 4096 or greater without fragmentation, undisclosed QUIC packets can cause NGINX worker processes to leak pre…
-
Medium 5.3
NGINX HTTP/3 QUIC vulnerability
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 requests can cause NGINX worker processes to terminate.
-
Medium 4.8
NGINX HTTP/3 QUIC vulnerability
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 requests can cause NGINX worker processes to terminate or cause other potential impact. This attack requires that a request be specifically timed during the connecti…
Revision history
-
#1
Initiale Fassung
References
-
Red Hat Bugtracker vom 2024-05-30
https://bugzilla.redhat.com/show_bug.cgi?id=2283919
-
Red Hat Bugtracker vom 2024-05-30
https://bugzilla.redhat.com/show_bug.cgi?id=2283926
-
Red Hat Bugtracker vom 2024-05-30
https://bugzilla.redhat.com/show_bug.cgi?id=2283933
-
Red Hat Bugtracker vom 2024-05-30
https://bugzilla.redhat.com/show_bug.cgi?id=2283940
-
Fedora Security Advisory FEDORA-2024-2E4858330C vom 2024-05-30
https://bodhi.fedoraproject.org/updates/FEDORA-2024-2e4858330c
-
Fedora Security Advisory FEDORA-2024-06E6DCBB42 vom 2024-05-30
https://bodhi.fedoraproject.org/updates/FEDORA-2024-06e6dcbb42