NGINX Open Source has a vulnerability in the ngx_http_v3_module module. When NGINX Open Source is configured to use the HTTP/3 QUIC module, a remote unauthenticated attacker along with conditions beyond their control can use a specially crafted HTTP/3 session to reopen a QPACK encoder stream. This may cause a Use-after-Free in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
oryginał ENCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XF5 nginx Gateway Fabric
APPF51.3.0 – 1.6.22.0.0 – 2.6.4 (bez)F5 nginx Ingress Controller
APPF54.0.04.0.15.0.0 – 5.5.1 (bez)3.5.0 – 3.7.2F5 nginx Instance Manager
APPF52.17.0 – 2.22.0F5 nginx Open Source
APPF51.31.0 – 1.31.2 (bez)
Powiązane podatności
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module...
Heap buffer overflow w NGINX w module ngx_http_rewrite_module (RCE)
NGINX heap buffer overflow w module ngx_http_rewrite_module (RCE/restart)
When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in...
When NGINX Gateway Fabric is configured using GRPCRoutes, an authenticated, remote attacker with permission to...