{"schemaVersion":3,"id":"CVE-2024-34161","aliases":["ALPINE-CVE-2024-34161","DEBIAN-CVE-2024-34161","CGA-2j5p-wqhg-7jx9","CGA-344w-c2fv-xwfr","CGA-34px-vhqf-mgvx","CGA-3w55-qqw5-p23c","CGA-47qq-59rf-3wf7","CGA-5rrv-mjfp-237h","CGA-9hjr-wc48-4g8h","CGA-c454-3639-qg52","CGA-c6g5-x348-hxgp","CGA-cj28-h4vx-q85v","CGA-f6pc-73mj-cvfp","CGA-g38p-r54m-wm5w","CGA-h8hh-g76w-v574","CGA-j6xq-qww2-p99q","CGA-jf9p-8q6v-49rm","CGA-jgpj-q423-f96w","CGA-jj32-c24w-4j92","CGA-m7w6-9mj3-5g4r","CGA-mq34-pg5q-w44x","CGA-qgr4-cxwc-h7cp","CGA-qw4h-w35g-9hrg","CGA-r9cw-79v2-gww5","CGA-rgxg-9c54-7mqg","CGA-vh9w-qg5w-5mq5","CGA-vv4m-8x78-8mv3","CGA-wc3r-4vxg-2fc6","CGA-wj6h-9cx7-2fh4","CGA-wvqw-g4p2-x7cw","CGA-wxvf-x53h-rpvp","CGA-xwfc-hj8j-q8ch"],"status":"published","duplicateOf":null,"title":null,"description":"When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module and the network infrastructure supports a Maximum Transmission Unit (MTU) of 4096 or greater without fragmentation, undisclosed QUIC packets can cause NGINX worker processes to leak previously freed memory.","dates":{"published":"2024-05-29T16:02:05.696Z","modified":"2025-02-13T17:52:28.046Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.3,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Alpine","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00867,"percentile":0.57975,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.00867},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00867,"percentile":0.57975}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00867,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00867,"percentile":0.57975}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-416","name":"Use After Free","description":"The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","type":"weakness","status":"Stable","abstraction":"Variant","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/416.html"}],"affected":[{"vendor":"alpine","product":"nginx","name":"nginx","label":"nginx","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/nginx","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline","name":"nginx-mainline","label":"nginx-mainline","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline-config","name":"nginx-mainline-config","label":"nginx-mainline-config","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline-config","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline-config-compat","name":"nginx-mainline-config-compat","label":"nginx-mainline-config-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline-config-compat","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline-mod-http_geoip","name":"nginx-mainline-mod-http_geoip","label":"nginx-mainline-mod-http_geoip","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline-mod-http_geoip","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline-mod-http_image_filter","name":"nginx-mainline-mod-http_image_filter","label":"nginx-mainline-mod-http_image_filter","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline-mod-http_image_filter","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline-mod-http_perl","name":"nginx-mainline-mod-http_perl","label":"nginx-mainline-mod-http_perl","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline-mod-http_perl","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline-mod-http_xslt_filter","name":"nginx-mainline-mod-http_xslt_filter","label":"nginx-mainline-mod-http_xslt_filter","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline-mod-http_xslt_filter","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline-mod-mail","name":"nginx-mainline-mod-mail","label":"nginx-mainline-mod-mail","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline-mod-mail","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline-mod-stream","name":"nginx-mainline-mod-stream","label":"nginx-mainline-mod-stream","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline-mod-stream","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline-mod-stream_geoip","name":"nginx-mainline-mod-stream_geoip","label":"nginx-mainline-mod-stream_geoip","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline-mod-stream_geoip","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline-openrc","name":"nginx-mainline-openrc","label":"nginx-mainline-openrc","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline-openrc","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline-package-config","name":"nginx-mainline-package-config","label":"nginx-mainline-package-config","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline-package-config","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline-src","name":"nginx-mainline-src","label":"nginx-mainline-src","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline-src","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline-syslog-config","name":"nginx-mainline-syslog-config","label":"nginx-mainline-syslog-config","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline-syslog-config","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-stable","name":"nginx-stable","label":"nginx-stable","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-stable","purlType":"apk","versions":[{"text":"< 1.26.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.26.1-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline","name":"nginx-mainline","label":"nginx-mainline","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline-config","name":"nginx-mainline-config","label":"nginx-mainline-config","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline-config","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline-config-compat","name":"nginx-mainline-config-compat","label":"nginx-mainline-config-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline-config-compat","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline-mod-http_geoip","name":"nginx-mainline-mod-http_geoip","label":"nginx-mainline-mod-http_geoip","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline-mod-http_geoip","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline-mod-http_image_filter","name":"nginx-mainline-mod-http_image_filter","label":"nginx-mainline-mod-http_image_filter","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline-mod-http_image_filter","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline-mod-http_perl","name":"nginx-mainline-mod-http_perl","label":"nginx-mainline-mod-http_perl","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline-mod-http_perl","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline-mod-http_xslt_filter","name":"nginx-mainline-mod-http_xslt_filter","label":"nginx-mainline-mod-http_xslt_filter","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline-mod-http_xslt_filter","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline-mod-mail","name":"nginx-mainline-mod-mail","label":"nginx-mainline-mod-mail","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline-mod-mail","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline-mod-stream","name":"nginx-mainline-mod-stream","label":"nginx-mainline-mod-stream","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline-mod-stream","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline-mod-stream_geoip","name":"nginx-mainline-mod-stream_geoip","label":"nginx-mainline-mod-stream_geoip","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline-mod-stream_geoip","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline-openrc","name":"nginx-mainline-openrc","label":"nginx-mainline-openrc","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline-openrc","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline-package-config","name":"nginx-mainline-package-config","label":"nginx-mainline-package-config","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline-package-config","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline-src","name":"nginx-mainline-src","label":"nginx-mainline-src","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline-src","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline-syslog-config","name":"nginx-mainline-syslog-config","label":"nginx-mainline-syslog-config","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline-syslog-config","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-stable","name":"nginx-stable","label":"nginx-stable","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-stable","purlType":"apk","versions":[{"text":"< 1.26.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.26.1-r0","eol":null,"hubHref":null},{"vendor":"debian","product":"nginx","name":"nginx","label":"nginx","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/nginx","purlType":"deb","versions":[{"text":"< 1.26.0-2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.26.0-2","eol":null,"hubHref":null},{"vendor":"f5","product":"nginx open source","name":"NGINX Open Source","label":"nginx open source","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.25.0, < 1.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.25.0, < 1.26.1","eol":null,"hubHref":"/vendor/f5/nginx_open_source"},{"vendor":"f5","product":"nginx plus","name":"NGINX Plus","label":"nginx plus","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ R30, < R32","noFixRecorded":false,"fixedIn":null},{"text":"r30","noFixRecorded":false,"fixedIn":null},{"text":"r30:p1","noFixRecorded":false,"fixedIn":null},{"text":"r30:p2","noFixRecorded":false,"fixedIn":null},{"text":"r31","noFixRecorded":false,"fixedIn":null},{"text":"r31:p1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ R30, < R32 | r30 | r30:p1 | r30:p2 | r31 | r31:p1","eol":null,"hubHref":"/vendor/f5/nginx_plus"},{"vendor":"fedoraproject","product":"fedora","name":"fedora","label":"fedora","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"39","noFixRecorded":false,"fixedIn":null},{"text":"40","noFixRecorded":false,"fixedIn":null}],"versionsText":"39 | 40","eol":{"isEol":true,"eolDate":"2024-11-26T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"39","label":"39","eolFrom":"2024-11-26T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"fedora","label":"Fedora Linux","category":"os"}},"hubHref":"/vendor/fedoraproject/fedora"}],"affectedCount":35,"eol":{"hasEol":true,"count":1},"references":[{"url":"https://my.f5.com/manage/s/article/K000139627","label":"my.f5.com/manage/s/article/K000139627","hostname":"my.f5.com","tags":["Vendor Advisory","Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R7RPLWC35WHEUFCGKNFG62ESNID25TEZ/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Advisory","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2024/05/30/4","label":"www.openwall.com/lists/oss-security/2024/05/30/4","hostname":"www.openwall.com","tags":["ARTICLE","Mailing List"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MLAOKJWDALQZBIV3WKGPJ6T5Z56D3PRD/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Advisory","Third Party Advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-34161","label":"security.alpinelinux.org/vuln/CVE-2024-34161","hostname":"security.alpinelinux.org","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-34161","label":"security-tracker.debian.org/tracker/CVE-2024-34161","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-7W7H-8FV6-W566","CGA-P2G3-PR6H-PQ73","CGA-PGQQ-Q4V5-6H3R","CGA-PHGV-WGFF-8P84","CGA-PJJ7-F5V9-P299","CGA-VW73-HMH2-22G9","CGA-XV67-HW5P-RVF3"]},"timeline":[{"kind":"published","date":"2024-05-29T16:02:05.696Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-02-13T17:52:28.046Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":21,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T12:12:12.260Z","stale":false,"partial":false}}