Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2024-36387
HistoryJul 01, 2024 - 7:15 p.m.

CVE-2024-36387

2024-07-0119:15:03
Alpine Linux Development Team
security.alpinelinux.org
1
cve-2024-36387
null pointer dereference
server crash
http/2
websocket upgrade
performance degradation

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance.

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%