[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQuh9i0kevk5nXk1bPkIzSneW6iZZF8QT4n6MpxWGSmo":3,"g5a-risk:CVE-2024-31079":168},{"success":4,"data":5,"meta":165},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":37,"epssPercentile":27,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":61,"references":62,"referencesCount":89,"weaknesses":90,"weaknessesCount":104,"isActivelyExploited":105,"cisaInfo":27,"otxData":27,"relatedBlogPosts":106,"seoMetadata":107,"configurations":132,"relatedVendorCves":163,"notableEvents":164},"CVE-2024-31079","What is CVE-2024-31079?","When NGINX Plus or NGINX OSS are configured to use the HTTP\u002F3 QUIC module, undisclosed HTTP\u002F3 requests can cause NGINX worker processes to terminate or cause other potential impact. This attack requires that a request be specifically timed during the connection draining process, which the attacker has no visibility and limited influence over.","When NGINX Plus or NGINX OSS are configured to use the HTTP\u002F3 QUIC module, undisclosed HTTP\u002F3 requests can cause NGINX worker processes to terminate or cause...","2024-05-29T16:15:09.8","2026-06-17T07:27:45.2",4.8,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",{"CVSSMetricV31":15,"CVSSMetricV30":34,"CVSSMetricV2":35,"CVSSMetricV40":36},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"f5sirt@f5.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","HIGH","NONE","UNCHANGED","LOW","MEDIUM",null,2.2,2.5,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[],[],[],0.00888,[37,37,37,37,37,37,37],"Medium",[41,46,50,53,58],{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"f5","nginx_open_source","*","cpe:2.3:a:f5:nginx_open_source:*:*:*:*:*:*:*:*",{"vendor":42,"product":47,"version":48,"criteria":49,"vulnerable":4},"nginx_plus","r30","cpe:2.3:a:f5:nginx_plus:r30:-:*:*:*:*:*:*",{"vendor":42,"product":47,"version":51,"criteria":52,"vulnerable":4},"r31","cpe:2.3:a:f5:nginx_plus:r31:-:*:*:*:*:*:*",{"vendor":54,"product":55,"version":56,"criteria":57,"vulnerable":4},"fedoraproject","fedora","39","cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",{"vendor":54,"product":55,"version":59,"criteria":60,"vulnerable":4},"40","cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*",5,[63,68,73,76,81,83,85,87],{"url":64,"source":65,"tags":66},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F05\u002F30\u002F4","Openwall",[67],"Mailing List",{"url":69,"source":70,"tags":71},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FMLAOKJWDALQZBIV3WKGPJ6T5Z56D3PRD\u002F","Fedoraproject",[72],"Third Party Advisory",{"url":74,"source":70,"tags":75},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FR7RPLWC35WHEUFCGKNFG62ESNID25TEZ\u002F",[72],{"url":77,"source":78,"tags":79},"https:\u002F\u002Fmy.f5.com\u002Fmanage\u002Fs\u002Farticle\u002FK000139611","F5",[80],"Vendor Advisory",{"url":64,"source":65,"tags":82},[67],{"url":69,"source":70,"tags":84},[72],{"url":74,"source":70,"tags":86},[72],{"url":77,"source":78,"tags":88},[80],8,[91,99],{"id":92,"name":93,"description":94,"extendedDescription":95,"status":96,"abstraction":97,"structure":98},"CWE-121","Stack-based Buffer Overflow","A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).","","Draft","Variant","Simple",{"id":100,"name":101,"description":102,"extendedDescription":95,"status":96,"abstraction":103,"structure":98},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","Base",2,false,[],{"title":108,"metaDescription":109,"keywords":110,"canonicalUrl":111,"structuredData":112},"What is CVE-2024-31079? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-31079, a medium severity cyber security vulnerability from 2024. When NGINX Plus or NGINX OSS are configured to use the HT...","CVE-2024-31079, CVE-2024-31079 vulnerability, CVE-2024-31079 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, f5 security, fedoraproject security, nginx_open_source vulnerability, nginx_plus vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2024-31079",{"@context":113,"@type":114,"headline":108,"description":109,"datePublished":10,"dateModified":11,"author":115,"publisher":119,"about":123,"mainEntityOfPage":127,"articleSection":130,"keywords":131},"https:\u002F\u002Fschema.org","TechArticle",{"@type":116,"name":117,"url":118},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":116,"name":117,"url":118,"logo":120},{"@type":121,"url":122},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":124,"name":6,"description":125,"additionalType":126},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":128,"@id":129},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-31079","Cybersecurity","CVE-2024-31079, CVE-2024-31079 vulnerability, CVE-2024-31079 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[133,155],{"Operator":27,"Negate":27,"Nodes":134},[135],{"Operator":136,"Negate":105,"CPEMatch":137},"OR",[138,142,144,147,150,152],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":139,"VersionStartExcluding":27,"VersionStartIncluding":140,"VersionEndExcluding":141,"VersionEndIncluding":27},"CA79B55D-E494-4961-81C6-80363BE46FE0","1.25.0","1.26.1",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":143,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"96BF2B19-52C7-4051-BA58-CAE6F912B72F",{"Vulnerable":4,"Criteria":145,"MatchCriteriaID":146,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:f5:nginx_plus:r30:p1:*:*:*:*:*:*","4EBEC829-7EED-487E-974D-BBA704DFBF0A",{"Vulnerable":4,"Criteria":148,"MatchCriteriaID":149,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:f5:nginx_plus:r30:p2:*:*:*:*:*:*","D0648596-D1F5-4A7A-B7F8-104E3AF26317",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":151,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"8248517E-D805-4928-8252-2168472341EF",{"Vulnerable":4,"Criteria":153,"MatchCriteriaID":154,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:f5:nginx_plus:r31:p1:*:*:*:*:*:*","9D5BB4C0-B862-4CDD-AA54-1BC1BDF27005",{"Operator":27,"Negate":27,"Nodes":156},[157],{"Operator":136,"Negate":105,"CPEMatch":158},[159,161],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":160,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":162,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"CA277A6C-83EC-4536-9125-97B84C4FAF59",[],[],{"lastModified":11,"cacheTime":166,"version":167},1792257341831,"2.0",{"score":169,"band":170,"action":171,"scoredAt":172},17,"Info","Track","2026-10-16T07:02:37.804643+00:00"]