Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| JBoss Core Services for RHEL 8 | RedHat | jbcs-httpd24-apr-0:1.7.5-3.el8jbcs | * |
| JBoss Core Services for RHEL 8 | RedHat | jbcs-httpd24-apr-util-0:1.6.3-2.el8jbcs | * |
| JBoss Core Services for RHEL 8 | RedHat | jbcs-httpd24-httpd-0:2.4.62-5.el8jbcs | * |
| JBoss Core Services for RHEL 8 | RedHat | jbcs-httpd24-mod_http2-0:2.0.29-3.el8jbcs | * |
| JBoss Core Services for RHEL 8 | RedHat | jbcs-httpd24-mod_jk-0:1.2.50-8.redhat_1.el8jbcs | * |
| JBoss Core Services for RHEL 8 | RedHat | jbcs-httpd24-mod_md-1:2.4.28-9.el8jbcs | * |
| JBoss Core Services for RHEL 8 | RedHat | jbcs-httpd24-mod_proxy_cluster-0:1.3.22-3.el8jbcs | * |
| JBoss Core Services for RHEL 8 | RedHat | jbcs-httpd24-mod_security-0:2.9.6-10.el8jbcs | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-apr-0:1.7.5-3.el7jbcs | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-apr-util-0:1.6.3-2.el7jbcs | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-brotli-0:1.1.0-5.el7jbcs | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-curl-0:8.11.0-2.el7jbcs | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-httpd-0:2.4.62-5.el7jbcs | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-jansson-0:2.14-4.el7jbcs | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-mod_http2-0:2.0.29-3.el7jbcs | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-mod_jk-0:1.2.50-8.redhat_1.el7jbcs | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-mod_md-1:2.4.28-9.el7jbcs | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-mod_proxy_cluster-0:1.3.22-3.el7jbcs | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-mod_security-0:2.9.6-10.el7jbcs | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-nghttp2-0:1.64.0-2.el7jbcs | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-openssl-1:1.1.1k-19.el7jbcs | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-openssl-chil-0:1.0.0-23.el7jbcs | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-openssl-pkcs11-0:0.4.12-3.el7jbcs | * |
| Red Hat Enterprise Linux 9 | RedHat | mod_http2-0:2.0.26-2.el9_4.1 | * |
| Text-Only JBCS | RedHat | mod_http2 | * |
| Apache2 | Ubuntu | devel | * |
| Apache2 | Ubuntu | focal | * |
| Apache2 | Ubuntu | jammy | * |
| Apache2 | Ubuntu | mantic | * |
| Apache2 | Ubuntu | noble | * |
| Apache2 | Ubuntu | oracular | * |
| Apache2 | Ubuntu | upstream | * |