Lucene search
+L

6911 matches found

Wolfi
Wolfi
added 2024/02/14 5:15 p.m.294 views

CVE-2024-24989 vulnerabilities

Vulnerabilities for packages: nginx-mainline...

7.5CVSS7.1AI score0.01061EPSS
SaveExploits0
OSV
OSV
added 2024/02/14 5:15 p.m.36 views

CVE-2024-24990

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3...

7.5CVSS7.5AI score
SaveExploits0References2
Prion
Prion
added 2024/02/14 5:15 p.m.27 views

Design/Logic Flaw

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3...

5CVSS7.1AI score0.00914EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/14 5:15 p.m.19 views

Design/Logic Flaw

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3...

5CVSS7.1AI score0.01061EPSS
SaveExploits0References1
Krebs on Security
Krebs on Security
added 2024/02/14 4:45 p.m.25 views

U.S. Internet Leaked Years of Internal, Customer Emails

The Minnesota-based Internet provider U.S. Internet Corp. has a business unit called Securence, which specializes in providing filtered, secure email services to businesses, educational institutions and government agencies worldwide. But until it was notified last week, U.S. Internet was publishi...

7AI score
SaveExploits0
Cvelist
Cvelist
added 2024/02/14 4:30 p.m.84 views

CVE-2024-24990 NGINX HTTP/3 QUIC vulnerability

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3...

7.5CVSS7.6AI score0.00914EPSS
SaveExploits0References2
CVE
CVE
added 2024/02/14 4:30 p.m.445 views

CVE-2024-24990

Summary of CVE-2024-24990 (NGINX HTTP/3 QUIC): The issue affects NGINX Plus and NGINX Open Source when the HTTP/3 QUIC module is enabled. Undisclosed requests can trigger a denial-of-service by causing NGINX worker processes to terminate. In practice, this is a data-plane DoS with no control-plan...

7.5CVSS7.5AI score0.00914EPSS
SaveExploits0References2Affected Software2
CVE
CVE
added 2024/02/14 4:30 p.m.561 views

CVE-2024-24989

CVE-2024-24989 affects NGINX Plus and NGINX Open Source when configured with the HTTP/3 QUIC module. The underlying issue is in the HTTP/3 QUIC module, which can cause NGINX worker processes to terminate, yielding a denial-of-service condition. The vulnerability is tied to the HTTP/3 QUIC module ...

7.5CVSS7.5AI score0.01061EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2024/02/14 4:30 p.m.85 views

CVE-2024-24989 NGINX HTTP/3 QUIC vulnerability

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3...

7.5CVSS7.6AI score0.01061EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/02/14 4:30 p.m.10 views

CVE-2024-24990 NGINX HTTP/3 QUIC vulnerability

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3...

7.5CVSS7.5AI score0.00914EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2024/02/14 4:30 p.m.127 views

CVE-2024-24990

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3...

7.5CVSS7.7AI score0.00914EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2024/02/14 4:30 p.m.96 views

CVE-2024-24989

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3...

7.5CVSS7.7AI score0.01061EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2024/02/14 4:30 p.m.15 views

CVE-2024-24989 NGINX HTTP/3 QUIC vulnerability

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3...

7.5CVSS7.5AI score0.01061EPSS
SaveExploits0References2
F5 Networks
F5 Networks
added 2024/02/14 2:04 p.m.65 views

K000138353: Quarterly Security Notification (February 2024)

Security Advisory Description On February 14, 2024, F5 announced the following security issues. This document is intended to serve as an overview of these vulnerabilities and security exposures to help determine the impact to your F5 devices. You can find the details of each issue in the associat...

8.7CVSS6.8AI score0.01061EPSS
SaveExploits0
F5 Networks
F5 Networks
added 2024/02/14 1:35 p.m.70 views

K000138445: NGINX HTTP/3 QUIC vulnerability CVE-2024-24990

Security Advisory Description When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. CVE-2024-24990 Note : The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information,...

7.5CVSS7.8AI score0.00914EPSS
SaveExploits0Affected Software2
F5 Networks
F5 Networks
added 2024/02/14 1:33 p.m.58 views

K000138444: NGINX HTTP/3 QUIC vulnerability CVE-2024-24989

Security Advisory Description When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. CVE-2024-24989 Note : The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information,...

7.5CVSS7.7AI score0.01061EPSS
SaveExploits0Affected Software2
CNNVD
CNNVD
added 2024/02/14 12:00 a.m.26 views

F5 Nginx Resource Management Error Vulnerability

F5 Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from F5, Inc. distributed under the BSD-like protocol. A security vulnerability exists in F5 Nginx Plus versions R30 and R31, which stems from an undisclosed request that could cause an NGINX worker process...

7.5CVSS8.4AI score0.00914EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/02/14 12:00 a.m.30 views

F5 Nginx Code Issues Vulnerabilities

F5 Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from F5 Inc. distributed under the BSD-like protocol. A security vulnerability exists in F5 Nginx Plus version R31, which stems from an undisclosed request that could cause an NGINX worker process to...

7.5CVSS8.4AI score0.01061EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2024/02/14 12:00 a.m.37 views

CVE-2024-24990

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3...

7.5CVSS7.1AI score0.00914EPSS
SaveExploits0References2
FreeBSD
FreeBSD
added 2024/02/14 12:00 a.m.79 views

nginx-devel -- Multiple Vulnerabilities in HTTP/3

The nginx development team reports: When using HTTP/3 a segmentation fault might occur in a worker process while processing a specially crafted QUIC session...

7.5CVSS6.8AI score0.01061EPSS
SaveExploits0
Rows per page
Query Builder