CVE-2024-31079
Fixed in a distro release EPSS <1%CVSS 4.8
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 requests can cause NGINX worker processes to terminate or cause other potential impact. This attack requires that a request be specifically timed during the connection draining process, which the attacker has no visibility and limited influence over.
Products: F5 NGINX Open Source, F5 NGINX Plus, F5 NGINX
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.20 | nginx | 0 |
| Alpine 3.21 | nginx | 0 |
| Alpine 3.22 | nginx | 0 |
| Alpine 3.23 | nginx | 0 |
| Alpine 3.24 | nginx | 0 |
| Chainguard | ingress-nginx-controller | 1.10.1-r4 |
| Chainguard | ingress-nginx-controller-1.9 | 1.9.6-r4 |
| Chainguard | ingress-nginx-controller-compat | 1.9.6-r4 |
| Chainguard | ingress-nginx-controller-compat-1.9 | 1.9.6-r4 |
| Chainguard | ingress-nginx-controller-compat-fips-1.9 | 1.9.6-r6 |
| Chainguard | ingress-nginx-controller-fips | 1.10.1-r5 |
| Chainguard | ingress-nginx-controller-fips-1.9 | 1.9.6-r6 |
| Chainguard | ingress-nginx-controller-fips-compat | 1.10.1-r5 |
| Chainguard | kube-webhook-certgen | 1.10.1-r4 |
| Chainguard | kube-webhook-certgen-1.9 | 1.9.6-r4 |
| Chainguard | kube-webhook-certgen-fips | 1.10.1-r5 |
| Chainguard | kube-webhook-certgen-fips-1.9 | 1.9.6-r6 |
| Chainguard | nginx-bitnami-compat | 1.27.0-r0 |
| Chainguard | nginx-mainline | 1.27.0-r0 |
| Chainguard | nginx-mainline-config | 1.27.0-r0 |
| Chainguard | nginx-mainline-config-compat | 1.27.0-r0 |
| Chainguard | nginx-mainline-mod-http_geoip | 1.27.0-r0 |
| Chainguard | nginx-mainline-mod-http_image_filter | 1.27.0-r0 |
| Chainguard | nginx-mainline-mod-http_perl | 1.27.0-r0 |
| Chainguard | nginx-mainline-mod-http_xslt_filter | 1.27.0-r0 |
| Chainguard | nginx-mainline-mod-mail | 1.27.0-r0 |
| Chainguard | nginx-mainline-mod-stream | 1.27.0-r0 |
| Chainguard | nginx-mainline-mod-stream_geoip | 1.27.0-r0 |
| Chainguard | nginx-mainline-openrc | 1.27.0-r0 |
| Chainguard | nginx-mainline-package-config | 1.27.0-r0 |
| Chainguard | nginx-mainline-src | 1.27.0-r0 |
| Chainguard | nginx-mainline-syslog-config | 1.27.0-r0 |
| Chainguard | nginx-stable | 1.26.1-r0 |
| Chainguard | nginx-stable-config | 1.26.1-r0 |
| Chainguard | nginx-stable-config-compat | 1.26.1-r0 |
| Chainguard | nginx-stable-mod-http_geoip | 1.26.1-r0 |
| Chainguard | nginx-stable-mod-http_image_filter | 1.26.1-r0 |
| Chainguard | nginx-stable-mod-http_perl | 1.26.1-r0 |
| Chainguard | nginx-stable-mod-http_xslt_filter | 1.26.1-r0 |
| Chainguard | nginx-stable-mod-mail | 1.26.1-r0 |
| Chainguard | nginx-stable-mod-stream | 1.26.1-r0 |
| Chainguard | nginx-stable-mod-stream_geoip | 1.26.1-r0 |
| Chainguard | nginx-stable-package-config | 1.26.1-r0 |
| Chainguard | nginx-stable-src | 1.26.1-r0 |
| Chainguard | nginx-stable-syslog-config | 1.26.1-r0 |
| Debian 13 | nginx | 1.26.0-2 |
| Debian 14 | nginx | 1.26.0-2 |
| Wolfi | ingress-nginx-controller | 1.10.1-r4 |
| Wolfi | ingress-nginx-controller-compat | 1.9.6-r4 |
| Wolfi | kube-webhook-certgen | 1.10.1-r4 |
| Wolfi | nginx-bitnami-compat | 1.27.0-r0 |
| Wolfi | nginx-mainline | 1.27.0-r0 |
| Wolfi | nginx-mainline-config | 1.27.0-r0 |
| Wolfi | nginx-mainline-config-compat | 1.27.0-r0 |
| Wolfi | nginx-mainline-mod-http_geoip | 1.27.0-r0 |
| Wolfi | nginx-mainline-mod-http_image_filter | 1.27.0-r0 |
| Wolfi | nginx-mainline-mod-http_perl | 1.27.0-r0 |
| Wolfi | nginx-mainline-mod-http_xslt_filter | 1.27.0-r0 |
| Wolfi | nginx-mainline-mod-mail | 1.27.0-r0 |
| Wolfi | nginx-mainline-mod-stream | 1.27.0-r0 |
| Wolfi | nginx-mainline-mod-stream_geoip | 1.27.0-r0 |
| Wolfi | nginx-mainline-openrc | 1.27.0-r0 |
| Wolfi | nginx-mainline-package-config | 1.27.0-r0 |
| Wolfi | nginx-mainline-src | 1.27.0-r0 |
| Wolfi | nginx-mainline-syslog-config | 1.27.0-r0 |
| Wolfi | nginx-stable | 1.26.1-r0 |
| Wolfi | nginx-stable-config | 1.26.1-r0 |
| Wolfi | nginx-stable-config-compat | 1.26.1-r0 |
| Wolfi | nginx-stable-mod-http_geoip | 1.26.1-r0 |
| Wolfi | nginx-stable-mod-http_image_filter | 1.26.1-r0 |
| Wolfi | nginx-stable-mod-http_perl | 1.26.1-r0 |
| Wolfi | nginx-stable-mod-http_xslt_filter | 1.26.1-r0 |
| Wolfi | nginx-stable-mod-mail | 1.26.1-r0 |
| Wolfi | nginx-stable-mod-stream | 1.26.1-r0 |
| Wolfi | nginx-stable-mod-stream_geoip | 1.26.1-r0 |
| Wolfi | nginx-stable-package-config | 1.26.1-r0 |
| Wolfi | nginx-stable-src | 1.26.1-r0 |
| Wolfi | nginx-stable-syslog-config | 1.26.1-r0 |