Wind River Support Network

HomeDefectsLIN1024-196
Fixed

LIN1024-196 : Security Advisory - nginx - CVE-2024-24989

Created: Apr 29, 2024    Updated: Jun 25, 2025
Resolved Date: Apr 11, 2025
Found In Version: 10.24.33.1
Fix Version: 10.24.33.8
Severity: Standard
Applicable for: Wind River Linux LTS 24
Component/s: Userspace

Description

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate.

Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to  Support for QUIC and HTTP/3 https://nginx.org/en/docs/quic.html .



NOTE: Software versions which have reached End of Technical Support (EoTS) are not evaluated










CREATE(Triage):(User=admin) CVE-2024-24989 (https://nvd.nist.gov/vuln/detail/CVE-2024-24989)

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube