VULNERABILITY INTELLIGENCE

CVE-2024-36387

CVSS score5.4 MEDIUM

EPSS probability1.71%

CISA KEVNot currently listed

Published2024-07-01

Last modified2026-06-17

Description

Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance.