215 matches found
Use After Free
Overview Microsoft.AspNetCore.App.Runtime.win-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Use After Free through the handling of HTTP/3 requests ...
MAL-2024-5213 Malicious code in http3-client (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in http3-client (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in dmnstnd-http3-client (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-5092 Malicious code in dmnstnd-http3-client (PyPI)
--- -= Per source details. Do not edit below this line.=-...
NGINX QUIC Module DoS
The vulnerability of the HTTP/3 QUIC module ngxhttpv3module in NGINX Plus and NGINX OSS relates to the assignment of the zero pointer. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted HTTP/3 requests...
SUSE CVE-2024-32760
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 encoder instructions can cause NGINX worker processes to terminate or cause or other potential impact...
DEBIAN-CVE-2024-32760
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 encoder instructions can cause NGINX worker processes to terminate or cause or other potential impact...
com.artipie.maven.resolver:maven-resolver-transport-http3 (>=v0.0.1, <=v0.0.9), com.artipie:asto-artipie (>=v1.17.2, <=v1.17.16) +13 more potentially affected by CVE-2024-22201 via org.eclipse.jetty.http3:jetty-http3-common (>=12.0.0, <=12.0.5)
org.eclipse.jetty.http3:jetty-http3-common MAVEN version =12.0.0, =v0.0.1, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =2.0.20, =12.0.0, =12.0.0, =12.0.0, =12.0.0, =12.0.0, =12.0.5 Source cves: CVE-2024-22201 Source advisory: OSV:GHSA-RGGV-CV7R-MW98...
com.artipie.maven.resolver:maven-resolver-transport-http3 (>=v0.0.1, <=v0.0.9), com.artipie:asto-artipie (>=v1.17.2, <=v1.17.16) +13 more potentially affected by CVE-2024-22201 via org.eclipse.jetty.http3:jetty-http3-common (>=12.0.0, <=12.0.5)
org.eclipse.jetty.http3:jetty-http3-common MAVEN version =12.0.0, =v0.0.1, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =2.0.20, =12.0.0, =12.0.0, =12.0.0, =12.0.0, =12.0.0, =12.0.5 Source cves: CVE-2024-22201 Source advisory: GHSA-RGGV-CV7R-MW98...
com.infomaximum:network (>=1.1.3p8, <=1.1.3p12), com.infomaximum:platform (>=0.1.6p17, <=0.1.15p24) +10 more potentially affected by CVE-2024-22201 via org.eclipse.jetty.http3:http3-common (>=11.0.8, <=11.0.19)
org.eclipse.jetty.http3:http3-common MAVEN version =11.0.8, =1.1.3p8, =0.1.6p17, =0.2.0, =0.2.0, =0.2.0, =11.0.8, =11.0.8, =11.0.8, =11.0.8, =11.0.8, =11.0.10, =11.0.19 Source cves: CVE-2024-22201 Source advisory: GHSA-RGGV-CV7R-MW98...
com.infomaximum:network (>=1.1.3p8, <=1.1.3p12), com.infomaximum:platform (>=0.1.6p17, <=0.1.15p24) +10 more potentially affected by CVE-2024-22201 via org.eclipse.jetty.http3:http3-common (>=11.0.8, <=11.0.19)
org.eclipse.jetty.http3:http3-common MAVEN version =11.0.8, =1.1.3p8, =0.1.6p17, =0.2.0, =0.2.0, =0.2.0, =11.0.8, =11.0.8, =11.0.8, =11.0.8, =11.0.8, =11.0.10, =11.0.19 Source cves: CVE-2024-22201 Source advisory: OSV:GHSA-RGGV-CV7R-MW98...
com.artipie.maven.resolver:maven-resolver-transport-http3 (>=v0.0.1, <=v0.0.9), com.artipie:asto-artipie (>=v1.17.2, <=v1.17.16) +13 more potentially affected by CVE-2024-22201 via org.eclipse.jetty.http3:jetty-http3-common (>=12.0.0, <=12.0.5)
org.eclipse.jetty.http3:jetty-http3-common MAVEN version =12.0.0, =v0.0.1, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =2.0.20, =12.0.0, =12.0.0, =12.0.0, =12.0.0, =12.0.0, =12.0.5 Source cves: CVE-2024-22201 Source advisory: MEND:CVE-2024-22201...
SUSE CVE-2024-24989
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3...
PT-2024-1647
The affected software is NGINX, specifically the HTTP/3 QUIC module in NGINX Plus and NGINX OSS. When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate, potentially leading to a denial of service, related to a...
SUSE CVE-2024-0207
HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...
CVE-2024-0207
A flaw was found in the HTTP3 dissector of Wireshark. It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file...
CVE-2024-0207
HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...
