CVE-2024-24990

Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3 https://nginx.org/en/docs/quic.html .

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

References

Affected packages

Git / github.com/nginx/nginx

Affected ranges

Type

GIT

Repo

https://github.com/nginx/nginx

Events

Introduced

05760b62e9799df559246af9f65c9e514617f558

Fixed

c8b288cd8a25628a167a874261069302f3cd7548

Database specific

{
    "versions": [
        {
            "introduced": "1.25.0"
        },
        {
            "fixed": "1.25.4"
        }
    ]
}

Affected versions

release-1.*

release-1.25.0

release-1.25.1

release-1.25.2

release-1.25.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-24990.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "r30-NA"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "r30-p1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "r31-NA"
            }
        ]
    }
]