ALT-PU-2024-9891-1
Package apache2-mod_http2 updated to version 2.0.29-alt1 for branch sisyphus in task 352687.
Closed vulnerabilities
Published: 2024-07-01
Modified: 2025-11-06
Modified: 2025-11-06
CVE-2024-36387
Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance.
Severity: MEDIUM (5.4)
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
References: