ALT-PU-2024-9971-2
Package apache2-mod_http2 updated to version 2.0.29-alt1 for branch p10 in task 352689.
Closed vulnerabilities
Published: 2024-05-27
BDU:2024-05194
Уязвимость протокола WebSocket веб-сервера Apache HTTP Server, позволяющая нарушителю вызвать отказ в обслуживании
Severity: MEDIUM (5.9)
Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity: MEDIUM (5.4)
Vector: AV:N/AC:H/Au:N/C:N/I:N/A:C
References:
Published: 2024-07-01
Modified: 2025-07-10
Modified: 2025-07-10
CVE-2024-36387
Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance.
Severity: MEDIUM (5.4)
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
References: