CVE Vulnerabilities

CVE-2024-39792

Operation on a Resource after Expiration or Release

Published: Aug 14, 2024 | Modified: Aug 19, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

When the NGINX Plus is configured to use the MQTT pre-read module, undisclosed requests can cause an increase in memory resource utilization.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Weakness

The product uses, accesses, or otherwise operates on a resource after that resource has been expired, released, or revoked.

Affected Software

Name Vendor Start Version End Version
Nginx_plus F5 r30 (including) r30 (including)
Nginx_plus F5 r30-p1 (including) r30-p1 (including)
Nginx_plus F5 r30-p2 (including) r30-p2 (including)
Nginx_plus F5 r31 (including) r31 (including)
Nginx_plus F5 r31-p1 (including) r31-p1 (including)
Nginx_plus F5 r32 (including) r32 (including)

References