When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3 https://nginx.org/en/docs/quic.html . NOTE: Software versions which have reached End of Technical Support (EoTS) are not evaluated

According to its self-reported version, the Tenable Sensor Proxy running on the remote host is prior to 1.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2026-15 advisory.

  - When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause     NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is     considered experimental. For more information, refer to Support for QUIC and HTTP/3     https://nginx.org/en/docs/quic.html . NOTE: Software versions which have reached End of Technical Support     (EoTS) are not evaluated (CVE-2024-24989)

  - When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause     NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is     considered experimental. For more information, refer to Support for QUIC and HTTP/3     https://nginx.org/en/docs/quic.html . Note: Software versions which have reached End of Technical Support     (EoTS) are not evaluated (CVE-2024-24990)

  - When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 requests can     cause NGINX worker processes to terminate or cause other potential impact. This attack requires that a     request be specifically timed during the connection draining process, which the attacker has no visibility     and limited influence over. (CVE-2024-31079)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0615 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2024-24989:
    A flaw was found in the nginx HTTP/3 implementation. This issue may allow an attacker to use a specially     crafted QUIC session to trigger a NULL pointer dereference error, causing a worker process to crash,     leading to a denial of service.

    CVE-2024-24990:
    /nWhen NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can     cause NGINX worker processes to terminate./n/nNote: The HTTP/3 QUIC module is not enabled by default and     is considered experimental. For more information, refer to  Support for QUIC and HTTP/3     https://nginx.org/en/docs/quic.html ./n/n/n/n /n/n/nNote: Software versions which have reached End of     Technical Support (EoTS) are not evaluated

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202409-32 (nginx: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in nginx. Please review the CVE identifiers referenced below     for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The installed version of nginx is 1.25.x prior to 1.25.4. It may, therefore, affected by the following vulnerabilities:

  - When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause     NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is     considered experimental. (CVE-2024-24989, CVE-2024-24990)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its Server response header, the installed version of nginx is 1.25.x prior to 1.25.4. It is, therefore, affected by the following issues :

- A NULL pointer dereference in HTTP/3. (CVE-2024-24989)

- A Use-after-free in HTTP/3. (CVE-2024-24990)

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the c97a4ecf-cc25-11ee-b0ee-0050569f0b83 advisory.

  - When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause     NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is     considered experimental. For more information, refer to Support for QUIC and HTTP/3     https://nginx.org/en/docs/quic.html . NOTE: Software versions which have reached End of Technical Support     (EoTS) are not evaluated (CVE-2024-24989)

  - When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause     NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is     considered experimental. For more information, refer to Support for QUIC and HTTP/3     https://nginx.org/en/docs/quic.html . Note: Software versions which have reached End of Technical Support     (EoTS) are not evaluated (CVE-2024-24990)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
316964	Tenable Sensor Proxy < 1.4.0 Multiple Vulnerabilities (TNS-2026-15)	Nessus	Misc.	Local	medium
239513	TencentOS Server 4: nginx (TSSA-2024:0615)	Nessus	Tencent Local Security Checks	Local	high
207892	GLSA-202409-32 : nginx: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	Local	medium
190683	nginx 1.25.x < 1.25.4 DoS	Nessus	Web Servers	Combined	high
114207	Nginx 1.25.x < 1.25.4 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	Version Based	high
190594	FreeBSD : nginx-devel -- Multiple Vulnerabilities in HTTP/3 (c97a4ecf-cc25-11ee-b0ee-0050569f0b83)	Nessus	FreeBSD Local Security Checks	Local	high

Detections

Analytics

CVE-2024-24989

high

Tenable Plugins

medium

high

medium

high

high

high