Lucene search

K
osvGoogleOSV:BIT-APACHE-2024-36387
HistoryJul 03, 2024 - 7:18 a.m.

BIT-apache-2024-36387

2024-07-0307:18:02
Google
osv.dev
4
websocket protocol
http/2
server crash
performance degradation
software vulnerability

6.5 Medium

AI Score

Confidence

Low

Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance.

CPENameOperatorVersion
apachege2.4.55
apachelt2.4.60