| Package | Affected versions | Patched versions |
|---|---|---|
| http server | = 2.4.49 | |
| instantis enterprisetrack | = 17.1= 17.2= 17.3 |
While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No exploit is known to the project.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free