description: A maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4.25 to dereference a NULL pointer and crash the server process.
affected:
{
product: Apache HTTP Server
vendor: Apache Software Foundation
versions:
status: affected, version: 2.4.24, 2.4.25
}