Nginx 1.25.x < 1.26.1 Multiple Vulnerabilities

🗓️ 06 Sep 2024 00:00:00Reported by This script is Copyright (C) 2024-2026 and is owned by Tenable, Inc. or an Affiliate thereof.Type

nessus

nessus🔗 www.tenable.com👁 606 Views

Nginx 1.25.x < 1.26.1 Multiple Vulnerabilities affecting HTTP/3 implementatio

Reporter	Title	Published	Views	Family All 154
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Nginx	29 Aug 202418:59	–	ibm
FreeBSD	nginx -- Multiple Vulnerabilities in HTTP/3	29 May 202400:00	–	freebsd
AlpineLinux	CVE-2024-31079	29 May 202416:02	–	alpinelinux
AlpineLinux	CVE-2024-32760	29 May 202416:02	–	alpinelinux
AlpineLinux	CVE-2024-34161	29 May 202416:02	–	alpinelinux
AlpineLinux	CVE-2024-35200	29 May 202416:02	–	alpinelinux
BDU FSTEC	The vulnerability of the HTTP/3 QUIC module (ngx_http_v3_module) in NGINX Plus and NGINX OSS web servers allows a hacker to gain unauthorized access to protected information.	5 Jun 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the HTTP/3 QUIC module (ngx_http_v3_module) in NGINX Plus and NGINX OSS web servers allows a attacker to cause a service failure.	5 Jun 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the HTTP/3 QUIC module (ngx_http_v3_module) in NGINX Plus and NGINX OSS web servers allows a attacker to cause a service failure.	5 Jun 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the HTTP/3 QUIC module (ngx_http_v3_module) in NGINX Plus and NGINX OSS web servers allows a attacker to cause a service failure.	5 Jun 202400:00	–	bdu_fstec

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
mailman	www.mailman.nginx.org/pipermail/nginx-announce/2024/GMY32CSHFH6VFTN76HJNX7WNEX4RLHF6.html
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

06 Sep 2024 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.16.5

EPSS0.00917

SSVC

nginx vulnerabilities http/3