Apache HTTP/2 read-after-free (CVE-2019-10082)

Summary

A read-after-free in Apache's HTTP/2 implementation causes application crashes.

Vulnerability ID	Vulnerability Overview
CVE-2019-10082	Using mod_http2, closing an HTTP/2 connection prematurely can trigger a read-after-free, crashing the server process.

Affected Supported TeraStations

TS5010/3020/3010
Fixed in firmware version 6.12
 

Back to Security Notices

Date	Description
09/09/2026	Initial release

Back to Security Notices