{"metadata": {"vulnerability": "CVE-2024-24990", "count": 51, "kinds": {"milestone": 14, "sighting": 6, "kev": 0, "other": 31}}, "data": [{"timestamp": "2024-02-02T00:32:55.375Z", "date_only": false, "value": "2024-02-02T00:32:55.375Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-24990", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-02-02T06:02:55.690Z", "date_only": false, "value": "2024-02-02T06:02:55.690341Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-24990", "record": "GSD-2024-24990", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-02-14T15:00:00Z", "date_only": false, "value": "2024-02-14T15:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / f5", "record": "CVE-2024-24990", "field": "containers.cna.datePublic"}, {"timestamp": "2024-02-14T16:30:26.445Z", "date_only": false, "value": "2024-02-14T16:30:26.445Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-24990", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-02-14T17:15:15Z", "date_only": false, "value": "2024-02-14T17:15:15Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-38GR-CJJP-3F5W", "record": "GHSA-38GR-CJJP-3F5W", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-02-14T17:15:15.713Z", "date_only": false, "value": "2024-02-14T17:15:15.713", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-24990", "record": "FKIE_CVE-2024-24990", "field": "published"}, {"timestamp": "2024-02-14T17:15:15.713Z", "date_only": false, "value": "2024-02-14T17:15:15.713", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2024-24990", "record": "GSD-2024-24990", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2024-02-14T18:04:45.380Z", "date_only": false, "value": "2024-02-14T18:04:45.380", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-24990", "record": "GSD-2024-24990", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-02-14T18:30:26Z", "date_only": false, "value": "2024-02-14T18:30:26Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-38GR-CJJP-3F5W", "record": "GHSA-38GR-CJJP-3F5W", "field": "published"}, {"timestamp": "2024-02-14T23:00:00Z", "date_only": false, "value": "2024-02-14T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0395", "record": "WID-SEC-W-2024-0395", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-02-14T23:00:00Z", "date_only": false, "value": "2024-02-14T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0395", "record": "WID-SEC-W-2024-0395", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-02-14T23:00:00Z", "date_only": false, "value": "2024-02-14T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0395", "record": "WID-SEC-W-2024-0395", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-02-15T00:00:00Z", "date_only": false, "value": "2024-02-15T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0133", "record": "CERTFR-2024-AVI-0133", "field": "last_revision_date"}, {"timestamp": "2024-02-15T00:00:00Z", "date_only": false, "value": "2024-02-15T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0137", "record": "CERTFR-2024-AVI-0137", "field": "last_revision_date"}, {"timestamp": "2024-02-15T00:00:00Z", "date_only": false, "value": "2024-02-15T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0133", "record": "CERTFR-2024-AVI-0133", "field": "initial_release_date"}, {"timestamp": "2024-02-15T00:00:00Z", "date_only": false, "value": "2024-02-15T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0137", "record": "CERTFR-2024-AVI-0137", "field": "initial_release_date"}, {"timestamp": "2024-02-15T00:00:00Z", "date_only": false, "value": "2024-02-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0133", "record": "CERTFR-2024-AVI-0133", "field": "revisions.0.revision_date"}, {"timestamp": "2024-02-15T00:00:00Z", "date_only": false, "value": "2024-02-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0137", "record": "CERTFR-2024-AVI-0137", "field": "revisions.0.revision_date"}, {"timestamp": "2024-02-15T08:11:19Z", "date_only": false, "value": "2024-02-15T08:11:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/185307", "record": "CVE-2024-24990", "field": "creation_timestamp", "uuid": "e309df32-11a4-448f-82ad-43c9f91e89db", "content": "https://ift.tt/eVr9ntY\nCVE-2024-24990", "url": "https://t.me/ctinow/185307"}, {"timestamp": "2024-02-15T11:21:21Z", "date_only": false, "value": "2024-02-15T11:21:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/185419", "record": "CVE-2024-24990", "field": "creation_timestamp", "uuid": "6a71e5eb-9225-44eb-ad18-70d018683734", "content": "https://ift.tt/BJ9dspn\nCVE-2024-24990 | F5 NGINX Plus/NGINX Open Source QUIC Module use after free (K000138445)", "url": "https://t.me/ctinow/185419"}, {"timestamp": "2024-02-16T07:21:25Z", "date_only": false, "value": "2024-02-16T07:21:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/habr_com_news/25253", "record": "CVE-2024-24990", "field": "creation_timestamp", "uuid": "b01c22e5-24ee-42b8-9b4b-8136f8aeb860", "content": "\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u00ab\u0412\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u00bb \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u0434\u0435 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Angie 1.4.1 \u0438 \u0432 \u0435\u0433\u043e \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Angie Pro. \u0418\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0441\u043d\u0443\u043b\u0438\u0441\u044c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 QUIC \u0438 HTTP/3 \u0432 nginx. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-24989 \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0448\u0438\u0431\u043a\u0435 \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 QUIC-\u0441\u0435\u0441\u0441\u0438\u0438. \u0421\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 CVE-2024-24990 \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Angie, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 1.4.0. \u041e\u0431 \u044d\u0442\u043e\u043c \u0425\u0430\u0431\u0440\u0443 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0430 \u043f\u0440\u0435\u0441\u0441-\u0441\u043b\u0443\u0436\u0431\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u00ab\u0412\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u00bb.\n\n#\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0430 #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c", "url": "https://t.me/habr_com_news/25253"}, {"timestamp": "2024-06-04T09:50:17.408Z", "date_only": false, "value": "2024-06-04T09:50:17.408Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-NGINX-2024-24990", "record": "BIT-NGINX-2024-24990", "field": "published"}, {"timestamp": "2024-06-10T16:14:53.733Z", "date_only": false, "value": "2024-06-10T16:14:53.733Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / f5", "record": "CVE-2024-24990", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-10T18:30:52Z", "date_only": false, "value": "2024-06-10T18:30:52Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-38GR-CJJP-3F5W", "record": "GHSA-38GR-CJJP-3F5W", "field": "modified"}, {"timestamp": "2024-08-01T23:36:21.362Z", "date_only": false, "value": "2024-08-01T23:36:21.362Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-24990", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-29T22:00:00Z", "date_only": false, "value": "2024-09-29T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0395", "record": "WID-SEC-W-2024-0395", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-09-29T22:00:00Z", "date_only": false, "value": "2024-09-29T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0395", "record": "WID-SEC-W-2024-0395", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-09-30T08:17:55.396Z", "date_only": false, "value": "2024-09-30T08:17:55.396+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0395", "record": "WID-SEC-W-2024-0395", "field": "document.tracking.generator.date"}, {"timestamp": "2024-10-17T13:15:19.595Z", "date_only": false, "value": "2024-10-17T13:15:19.595269Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0411", "record": "NCSC-2024-0411", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-10-17T13:15:19.595Z", "date_only": false, "value": "2024-10-17T13:15:19.595269Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0411", "record": "NCSC-2024-0411", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-10-17T13:15:19.595Z", "date_only": false, "value": "2024-10-17T13:15:19.595269Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0411", "record": "NCSC-2024-0411", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-05-08T15:18:51.597Z", "date_only": false, "value": "2025-05-08T15:18:51.597565Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-24990", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-05-08T15:18:51.597Z", "date_only": false, "value": "2025-05-08T15:18:51.597565Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-24990", "record": "FKIE_CVE-2024-24990", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-05-08T15:19:34.642Z", "date_only": false, "value": "2025-05-08T15:19:34.642Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-24990", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-05-08T15:19:34.642Z", "date_only": false, "value": "2025-05-08T15:19:34.642Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-24990", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-08T15:24:28Z", "date_only": false, "value": "2025-05-08T15:24:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15533", "record": "CVE-2024-24990", "field": "creation_timestamp", "uuid": "2c8e76d2-0866-4876-b5ba-1accb47999db", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-24990\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate.\n\nNote: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to  Support for QUIC and HTTP/3 https://nginx.org/en/docs/quic.html .\n\n\n\n \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated\n\ud83d\udccf Published: 2024-02-14T16:30:26.445Z\n\ud83d\udccf Modified: 2025-05-08T15:19:34.642Z\n\ud83d\udd17 References:\n1. https://my.f5.com/manage/s/article/K000138445\n2. http://www.openwall.com/lists/oss-security/2024/05/30/4", "url": "https://t.me/DarkWebInformer_CVEAlerts/15533"}, {"timestamp": "2025-08-12T00:00:00Z", "date_only": false, "value": "2025-08-12T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-226-17", "record": "ICSA-25-226-17", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-08-12T00:00:00Z", "date_only": false, "value": "2025-08-12T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-517338", "record": "SSA-517338", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-08-12T00:00:00Z", "date_only": false, "value": "2025-08-12T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-25-226-17", "record": "ICSA-25-226-17", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-08-12T00:00:00Z", "date_only": false, "value": "2025-08-12T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-517338", "record": "SSA-517338", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-08-12T00:00:00Z", "date_only": false, "value": "2025-08-12T00:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-25-226-17", "record": "ICSA-25-226-17", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-08-12T00:00:00Z", "date_only": false, "value": "2025-08-12T00:00:00Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-517338", "record": "SSA-517338", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-08-14T10:00:00Z", "date_only": false, "value": "2025-08-14T10:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-17", "record": "CVE-2024-24990", "field": "creation_timestamp", "uuid": "4f96dc1d-59e5-4a04-b6f3-48ecaf6762fa", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-17"}, {"timestamp": "2025-08-14T20:56:37.371Z", "date_only": false, "value": "2025-08-14T20:56:37.371670Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-25-226-17", "record": "ICSA-25-226-17", "field": "document.tracking.generator.date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": true, "value": "2026-05-21", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0630", "record": "CERTFR-2026-AVI-0630", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-05-22T00:00:00Z", "date_only": false, "value": "2026-05-22T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0630", "record": "CERTFR-2026-AVI-0630", "field": "last_revision_date"}, {"timestamp": "2026-05-22T00:00:00Z", "date_only": false, "value": "2026-05-22T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0630", "record": "CERTFR-2026-AVI-0630", "field": "initial_release_date"}, {"timestamp": "2026-05-22T00:00:00Z", "date_only": false, "value": "2026-05-22T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0630", "record": "CERTFR-2026-AVI-0630", "field": "revisions.0.revision_date"}, {"timestamp": "2026-06-17T07:15:20.393Z", "date_only": false, "value": "2026-06-17T07:15:20.393", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-24990", "record": "FKIE_CVE-2024-24990", "field": "lastModified"}, {"timestamp": "2026-08-29T18:00:06.098Z", "date_only": false, "value": "2026-08-29T18:00:06.098327Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/angie_software/39", "record": "CVE-2024-24990", "field": "creation_timestamp", "uuid": "2c0ffc16-1597-4f0a-ae3b-83f6b8044a20", "url": "https://t.me/angie_software/39"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-NGINX-2024-24990", "record": "BIT-NGINX-2024-24990", "field": "modified"}]}