Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-35200

NGINX HTTP/3 QUIC vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
f5

Description

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 requests can cause NGINX worker processes to terminate.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

F5 NGINX Open Source

Default version status: unknown

  • 1.25.0 to < 1.26.1affected

F5 NGINX Plus

Default version status: unknown

  • R30 to < R32affected

References