CVE-2024-36387

Publication date

2024-07-01 18:10:25

Family

apache

State

PUBLISHED

Description

Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance.