Medium severity5.4NVD Advisory· Published Jul 1, 2024· Updated Jun 17, 2026
CVE-2024-36387
CVE-2024-36387
Description
Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
21cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*range: >=2.4.55,<=2.4.59
- (no CPE)range: 2.4.55
- osv-coords17 versionspkg:bitnami/apachepkg:rpm/almalinux/mod_http2pkg:rpm/opensuse/apache2&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/apache2&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/apache2-devel&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/apache2-event&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/apache2-manual&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/apache2-prefork&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/apache2-utils&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/apache2-worker&distro=openSUSE%20Leap%2015.6pkg:rpm/suse/apache2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6pkg:rpm/suse/apache2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP6pkg:rpm/suse/apache2-devel&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP6pkg:rpm/suse/apache2-event&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP6pkg:rpm/suse/apache2-prefork&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6pkg:rpm/suse/apache2-utils&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP6pkg:rpm/suse/apache2-worker&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP6
>= 2.4.55, < 2.4.60+ 16 more
- (no CPE)range: >= 2.4.55, < 2.4.60
- (no CPE)range: < 2.0.26-2.el9_4.1
- (no CPE)range: < 2.4.58-150600.5.18.1
- (no CPE)range: < 2.4.61-1.1
- (no CPE)range: < 2.4.58-150600.5.18.1
- (no CPE)range: < 2.4.58-150600.5.18.1
- (no CPE)range: < 2.4.58-150600.5.18.1
- (no CPE)range: < 2.4.58-150600.5.18.1
- (no CPE)range: < 2.4.58-150600.5.18.1
- (no CPE)range: < 2.4.58-150600.5.18.1
- (no CPE)range: < 2.4.58-150600.5.18.1
- (no CPE)range: < 2.4.58-150600.5.18.1
- (no CPE)range: < 2.4.58-150600.5.18.1
- (no CPE)range: < 2.4.58-150600.5.18.1
- (no CPE)range: < 2.4.58-150600.5.18.1
- (no CPE)range: < 2.4.58-150600.5.18.1
- (no CPE)range: < 2.4.58-150600.5.18.1
Patches
Vulnerability mechanics
References
3- www.openwall.com/lists/oss-security/2024/07/01/4nvdMailing ListThird Party Advisory
- httpd.apache.org/security/vulnerabilities_24.htmlnvdVendor Advisory
- security.netapp.com/advisory/ntap-20240712-0001/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.