Red Hat Security Advisory

RHSA-2024:8680

mod_http2 security update

Released 2024-10-31 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) mod_http2-2.0.26-2.el9_4.1

Fixes 1 record

TI-2024-24173 CVE-2024-36387 · GHSA-463r-p989-2f9j

Apache HTTP Server: DoS by Null pointer in websocket over HTTP/2

LOW 28

Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.01715 Published 2024-07-01 Fixed CWE-476