CVE-2012-0031

Опубликовано: 18 янв. 2012

Источник: nvd

CVSS2: 4.6

EPSS Низкий

Описание

scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon crash during shutdown) or possibly have unspecified other impact by modifying a certain type field within a scoreboard shared memory segment, leading to an invalid call to the free function.

Ссылки

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
Broken Link
http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html
Broken Link
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00026.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00002.html
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=133294460209056&w=2
Issue Tracking
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=133494237717847&w=2
Issue Tracking
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=134987041210674&w=2
Issue Tracking
Mailing List
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-0128.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-0542.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-0543.html
Third Party Advisory
http://secunia.com/advisories/47410
Not Applicable
Vendor Advisory
http://secunia.com/advisories/48551
Not Applicable
http://support.apple.com/kb/HT5501
Third Party Advisory
http://svn.apache.org/viewvc?view=revision&revision=1230065
Vendor Advisory
http://www.debian.org/security/2012/dsa-2405
Third Party Advisory
http://www.halfdog.net/Security/2011/ApacheScoreboardInvalidFreeOnShutdown/
Exploit
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2012:012
Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
Broken Link
http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
Third Party Advisory
http://www.securityfocus.com/bid/51407
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*

Версия от 2.0.0 (включая) до 2.0.65 (исключая)

cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*

Версия от 2.2.0 (включая) до 2.2.22 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:-:*:*:*

cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp4:*:*:*:*:*:*

Конфигурация 4

Одновременно

cpe:2.3:a:redhat:jboss_enterprise_web_server:1.0.0:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

Конфигурация 5

Одно из

cpe:2.3:a:redhat:storage:2.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:6.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:6.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01196

Низкий

4.6 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2012-0031

ubuntu

около 14 лет назад

CVE-2012-0031

redhat

около 14 лет назад

CVE-2012-0031

debian

около 14 лет назад

scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow ...

GHSA-9mf5-9fjr-xvhw

github

почти 4 года назад

ELSA-2012-0323

oracle-oval

почти 14 лет назад

ELSA-2012-0323: httpd security update (MODERATE)

EPSS

Процентиль: 79%

0.01196

Низкий

4.6 Medium

CVSS2

Дефекты

NVD-CWE-noinfo