CVE-2012-0031
MEDIUM severity · CVSS 4.6
4.6CVSS MEDIUM
Summary
scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon crash during shutdown) or possibly have unspecified other impact by modifying a certain type field within a scoreboard shared memory segment, leading to an invalid call to the free function.
Impact & exploitability
Attack vectorLocal
Attack complexityLow
Privileges required—
User interaction—
Confidentiality impact—
Integrity impact—
Availability impact—
Exploit probability (EPSS)3%
AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Additional information
- NVD record
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
- http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00026.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00002.htmlAdvisory
- http://marc.info/?l=bugtraq&m=133294460209056&w=2Advisory
- http://marc.info/?l=bugtraq&m=133494237717847&w=2Advisory
- http://marc.info/?l=bugtraq&m=134987041210674&w=2Advisory
- http://rhn.redhat.com/errata/RHSA-2012-0128.htmlAdvisory