Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2024-36387

Apache HTTP Server: DoS by Null pointer in websocket over HTTP/2

Description

Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache HTTP Server

Default version status: unaffected

  • 2.4.55 to ≤ 2.4.59affected

References