Assigner | f5 |
Reserved | 2024-05-14 |
Published | 2024-05-29 |
Updated | 2024-06-04 |
Description
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module and the network infrastructure supports a Maximum Transmission Unit (MTU) of 4096 or greater without fragmentation, undisclosed QUIC packets can cause NGINX worker processes to leak previously freed memory.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Problem types
Product status
1.25.0 before 1.26.1
R30 before R32
Credits
F5
References
https://my.f5.com/manage/s/article/K000139627