Unrated severityNVD Advisory· Published Feb 14, 2024· Updated May 8, 2025
NGINX HTTP/3 QUIC vulnerability
CVE-2024-24990
Description
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate.
Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3 https://nginx.org/en/docs/quic.html .
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
49(expand)+ 1 more
- (no CPE)
- (no CPE)range: R31
- osv-coords47 versionspkg:apk/chainguard/ingress-nginx-controllerpkg:apk/chainguard/ingress-nginx-controller-1.9pkg:apk/chainguard/ingress-nginx-controller-compatpkg:apk/chainguard/ingress-nginx-controller-compat-1.9pkg:apk/chainguard/ingress-nginx-controller-compat-fips-1.9pkg:apk/chainguard/ingress-nginx-controller-fipspkg:apk/chainguard/ingress-nginx-controller-fips-1.9pkg:apk/chainguard/ingress-nginx-controller-fips-compatpkg:apk/chainguard/kube-webhook-certgenpkg:apk/chainguard/kube-webhook-certgen-1.9pkg:apk/chainguard/kube-webhook-certgen-fipspkg:apk/chainguard/kube-webhook-certgen-fips-1.9pkg:apk/chainguard/nginx-bitnami-compatpkg:apk/chainguard/nginx-mainlinepkg:apk/chainguard/nginx-mainline-configpkg:apk/chainguard/nginx-mainline-config-compatpkg:apk/chainguard/nginx-mainline-mod-http_geoippkg:apk/chainguard/nginx-mainline-mod-http_image_filterpkg:apk/chainguard/nginx-mainline-mod-http_perlpkg:apk/chainguard/nginx-mainline-mod-http_xslt_filterpkg:apk/chainguard/nginx-mainline-mod-mailpkg:apk/chainguard/nginx-mainline-mod-streampkg:apk/chainguard/nginx-mainline-mod-stream_geoippkg:apk/chainguard/nginx-mainline-openrcpkg:apk/chainguard/nginx-mainline-package-configpkg:apk/chainguard/nginx-mainline-srcpkg:apk/chainguard/nginx-mainline-syslog-configpkg:apk/wolfi/ingress-nginx-controllerpkg:apk/wolfi/ingress-nginx-controller-compatpkg:apk/wolfi/kube-webhook-certgenpkg:apk/wolfi/nginx-bitnami-compatpkg:apk/wolfi/nginx-mainlinepkg:apk/wolfi/nginx-mainline-configpkg:apk/wolfi/nginx-mainline-config-compatpkg:apk/wolfi/nginx-mainline-mod-http_geoippkg:apk/wolfi/nginx-mainline-mod-http_image_filterpkg:apk/wolfi/nginx-mainline-mod-http_perlpkg:apk/wolfi/nginx-mainline-mod-http_xslt_filterpkg:apk/wolfi/nginx-mainline-mod-mailpkg:apk/wolfi/nginx-mainline-mod-streampkg:apk/wolfi/nginx-mainline-mod-stream_geoippkg:apk/wolfi/nginx-mainline-openrcpkg:apk/wolfi/nginx-mainline-package-configpkg:apk/wolfi/nginx-mainline-srcpkg:apk/wolfi/nginx-mainline-syslog-configpkg:bitnami/nginxpkg:bitnami/nginx-gateway
< 1.10.1-r4+ 46 more
- (no CPE)range: < 1.10.1-r4
- (no CPE)range: < 1.9.6-r4
- (no CPE)range: < 1.9.6-r4
- (no CPE)range: < 1.9.6-r4
- (no CPE)range: < 1.9.6-r6
- (no CPE)range: < 1.10.1-r5
- (no CPE)range: < 1.9.6-r6
- (no CPE)range: < 1.10.1-r5
- (no CPE)range: < 1.10.1-r4
- (no CPE)range: < 1.9.6-r4
- (no CPE)range: < 1.10.1-r5
- (no CPE)range: < 1.9.6-r6
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.10.1-r4
- (no CPE)range: < 1.9.6-r4
- (no CPE)range: < 1.10.1-r4
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: < 1.25.4-r0
- (no CPE)range: >= 1.25.0, < 1.25.4
- (no CPE)range: >= 1.25.0, < 1.25.4
Patches
Vulnerability mechanics
References
2- my.f5.com/manage/s/article/K000138445mitrevendor-advisory
- www.openwall.com/lists/oss-security/2024/05/30/4mitre
News mentions
0No linked articles in our index yet.