p PatchFirst

CVE-2024-33452

CVE-2024-33452

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request.

CVSS 7.7 · High · EPSS 0.9% · Fix available

Published
Updated

Stack: system · web

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • libnginx-mod-http-lua Debian:12

    Versions
    • 1:0.10.23-1
    Affected ranges
    • ECOSYSTEM: < 1:0.10.23-1+deb12u1

    Update to 1:0.10.23-1+deb12u1

  • libnginx-mod-http-lua Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:0.10.27-1

    Update to 1:0.10.27-1

  • libnginx-mod-http-lua Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:0.10.27-1

    Update to 1:0.10.27-1

  • nginx Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.22.0-3

    Update to 1.22.0-3

  • nginx Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.22.0-3

    Update to 1.22.0-3

  • nginx Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.22.0-3

    Update to 1.22.0-3

  • lua-nginx-memcached Ubuntu:16.04:LTS

    Versions
    • 0.10-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • lua-nginx-redis Ubuntu:16.04:LTS

    Versions
    • 0.20-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • lua-nginx-websocket Ubuntu:16.04:LTS

    Versions
    • 0.05-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • lua-nginx-memcached Ubuntu:18.04:LTS

    Versions
    • 0.10-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • lua-nginx-redis Ubuntu:18.04:LTS

    Versions
    • 0.26-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • lua-nginx-websocket Ubuntu:18.04:LTS

    Versions
    • 0.06-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • lua-nginx-memcached Ubuntu:20.04:LTS

    Versions
    • 0.14-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • lua-nginx-redis Ubuntu:20.04:LTS

    Versions
    • 0.27-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • lua-nginx-websocket Ubuntu:20.04:LTS

    Versions
    • 0.06-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • lua-nginx-memcached Ubuntu:22.04:LTS

    Versions
    • 0.14-1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • lua-nginx-redis Ubuntu:22.04:LTS

    Versions
    • 0.27-1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • lua-nginx-websocket Ubuntu:22.04:LTS

    Versions
    • 0.08-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • lua-nginx-memcached Ubuntu:24.04:LTS

    Versions
    • 0.14-1.1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • lua-nginx-redis Ubuntu:24.04:LTS

    Versions
    • 0.27-1.1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • lua-nginx-websocket Ubuntu:24.04:LTS

    Versions
    • 0.08-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • lua-nginx-memcached Ubuntu:25.10

    Versions
    • 0.14-1.1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • lua-nginx-redis Ubuntu:25.10

    Versions
    • 0.27-1.1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →