Skip to content
OpenAdvisories
High · 7.5 CVE-2024-39792 EUVD-2024-38237GHSA-j72m-4pgw-w3qv

NGINX Plus MQTT vulnerability

Published Aug 14, 2024 · Updated Aug 15, 2024 · Assigned by f5

Description

When the NGINX Plus is configured to use the MQTT pre-read module, undisclosed requests can cause an increase in memory resource utilization.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

VendorProductAffectedFixed
F5 NGINX Plus R30 —

Advisories 1

References