Related Vulnerabilities: CVE-2017-7659  

A NULL-pointer dereference leading to denial of service has been found in the mod_http2 component of Apache httpd < 2.4.26. A maliciously constructed HTTP/2 request could cause mod_http2 to dereference a NULL pointer and crash the server process.

Severity High

Remote Yes

Type Denial of service

Description

A NULL-pointer dereference leading to denial of service has been found in the mod_http2 component of Apache httpd < 2.4.26. A maliciously constructed HTTP/2 request could cause mod_http2 to dereference a NULL pointer and crash the server process.

AVG-316 apache 2.4.25-3 2.4.26-1 High Fixed

28 Jun 2017 ASA-201706-34 AVG-316 apache High multiple issues

https://httpd.apache.org/security/vulnerabilities_24.html