When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 requests can cause NGINX worker processes to terminate.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Nginx_open_source | F5 | 1.25.0 (including) | 1.26.1 (excluding) |
| Nginx_plus | F5 | r30 (including) | r30 (including) |
| Nginx_plus | F5 | r30-p1 (including) | r30-p1 (including) |
| Nginx_plus | F5 | r30-p2 (including) | r30-p2 (including) |
| Nginx_plus | F5 | r31 (including) | r31 (including) |
| Nginx_plus | F5 | r31-p1 (including) | r31-p1 (including) |