Описание
ELSA-2024-8680: mod_http2 security update (LOW)
[2.0.26-2.1]
- Resolves: RHEL-45803 - mod_http2: DoS by null pointer in websocket over HTTP/2 (CVE-2024-36387)
Обновленные пакеты
Oracle Linux 9
Oracle Linux aarch64
mod_http2
2.0.26-2.el9_4.1
Oracle Linux x86_64
mod_http2
2.0.26-2.el9_4.1
Связанные CVE
Связанные уязвимости
Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance.
Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance.
Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance.
Apache HTTP Server: DoS by Null pointer in websocket over HTTP/2
Serving WebSocket protocol upgrades over a HTTP/2 connection could res ...