CVE-2024-24549 — Apache Tomcat HTTP/2 DoS

An HTTP/2 rapid-reset variant specific to Tomcat's connector caused unbounded CPU consumption, allowing a small attacker to saturate a Tomcat-fronted application.