Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-36387
HistoryJul 01, 2024 - 12:00 a.m.

CVE-2024-36387

2024-07-0100:00:00
ubuntu.com
ubuntu.com
2
null pointer dereference
http/2
server crash
performance degradation
unix

Serving WebSocket protocol upgrades over a HTTP/2 connection could result
in a Null Pointer dereference, leading to a crash of the server process,
degrading performance.

Notes

Author Note
mdeslaur While this issue was introduced in 2.4.55, the http2 module was backported to earlier Ubuntu releases.