When under stress, closing many connections, the HTTP/2 handling code in Apache httpd 2.4.26 would sometimes access memory after it has been

Summary

When under stress, closing many connections, the HTTP/2 handling code in Apache httpd 2.4.26 would sometimes access memory after it has been freed, resulting in potentially erratic behaviour.

Timeline

1. Jul 13, 2017, 4:00 PM UTCCVE published
2. Sep 16, 2024, 8:22 PM UTCRecord last updated

Affected versions

• Apache Software Foundation Apache HTTP Server

  2.4.26

References 22