ALT-PU-2024-10221-2
Package apache2-mod_http2 updated to version 2.0.29-alt1 for branch c9f2 in task 352692.
Closed vulnerabilities
Published: 2024-05-27
BDU:2024-05194
Уязвимость протокола WebSocket веб-сервера Apache HTTP Server, позволяющая нарушителю вызвать отказ в обслуживании
Severity: MEDIUM (5.9)
Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
Published: 2024-07-01
Modified: 2024-11-25
Modified: 2024-11-25
CVE-2024-36387
Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance.
References: