CVE-2024-36387

Medium

Published: —Translated: 27/07/2026(UTC)NVD NIST

Summary

Serving WebSocket protocol upgrades over an HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance.

Risk Assessment

An attacker can cause the server to crash, leading to service interruption and potential loss of application availability.

Recommendation

Upgrade Apache HTTP Server to a version containing a fix for this vulnerability.

Original NVD description (English source)

Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance.