description: A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly.
problem types: mod_http2, read-after-free on a string compare
affected:
{
product: Apache HTTP Server
vendor: Apache Software Foundation
versions:
status: affected, version: 2.4.17 to 2.4.38
}