Low ELSA-2024-8680 1 CVE

Low: mod_http2 security update (Oracle Linux 9)

Published Oct 30, 2024 · Updated Oct 30, 2024

Ecosystem: Oracle Linux

Summary

[2.0.26-2.1]
- Resolves: RHEL-45803 - mod_http2: DoS by null pointer in websocket
over HTTP/2 (CVE-2024-36387)

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 9	mod_http2	0:2.0.26-2.el9_4.1

Vulnerabilities 1

Medium 5.4

CVE-2024-36387

Apache HTTP Server: DoS by Null pointer in websocket over HTTP/2

Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance.

Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine

Jul 1, 2024