CVE-2024-34161
NGINX HTTP/3 QUIC vulnerability
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
NGINX HTTP/3 QUIC vulnerability
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module and the network infrastructure supports a Maximum Transmission Unit (MTU) of 4096 or greater without fragmentation, undisclosed QUIC packets can cause NGINX worker processes to leak previously freed memory.
Reserved 2024-05-14 | Published 2024-05-29 | Updated 2025-02-13 | Assigner f5F5
my.f5.com/manage/s/article/K000139627
lists.fedoraproject.org/...R7RPLWC35WHEUFCGKNFG62ESNID25TEZ/
www.openwall.com/lists/oss-security/2024/05/30/4
lists.fedoraproject.org/...MLAOKJWDALQZBIV3WKGPJ6T5Z56D3PRD/
Support options
