Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2024-35200 Details

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 requests can cause NGINX worker processes to terminate.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.3 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CNA: [email protected]CVSS-B:5.3 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://lists.fedoraproject.org/archives/list/[email protected]/message/MLAOKJWDALQZBIV3WKGPJ6T5Z56D3PRD/	CVE	Third Party Advisory
https://lists.fedoraproject.org/archives/list/[email protected]/message/R7RPLWC35WHEUFCGKNFG62ESNID25TEZ/	CVE	Third Party Advisory
https://my.f5.com/manage/s/article/K000139612	CVE	Vendor Advisory
http://www.openwall.com/lists/oss-security/2024/05/30/4	CVE	Mailing List
https://lists.fedoraproject.org/archives/list/[email protected]/message/MLAOKJWDALQZBIV3WKGPJ6T5Z56D3PRD/	[email protected]	Third Party Advisory
https://lists.fedoraproject.org/archives/list/[email protected]/message/R7RPLWC35WHEUFCGKNFG62ESNID25TEZ/	[email protected]	Third Party Advisory
https://my.f5.com/manage/s/article/K000139612	[email protected]	Vendor Advisory
http://www.openwall.com/lists/oss-security/2024/05/30/4	[email protected]	Mailing List

CWE-ID	CWE Name	Source
CWE-476	NULL Pointer Dereference	[email protected]
CWE-476	NULL Pointer Dereference	[email protected]

Product	Versions
f5 nginx open source	>= 1.25.0, < 1.26.1
CPE cpe:2.3:a:f5:nginx_open_source:::::::: Remediation No remediation found in references.
f5 nginx plus	r30 - r30 p1 r30 p2 r31 - r31 p1
CPE cpe:2.3:a:f5:nginx_plus:r30:-:::::: cpe:2.3:a:f5:nginx_plus:r30:p1:::::: cpe:2.3:a:f5:nginx_plus:r30:p2:::::: cpe:2.3:a:f5:nginx_plus:r31:-:::::: cpe:2.3:a:f5:nginx_plus:r31:p1:::::: Remediation No remediation found in references.
fedoraproject fedora	39 40
CPE cpe:2.3:o:fedoraproject:fedora:39:::::::* cpe:2.3:o:fedoraproject:fedora:40:::::::* Remediation No remediation found in references.

7 change records found show changes

QUICK INFO