httpd: possible crash on shutdown due to flaw in scoreboard handling
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
Configuration 2 [-]
|
Configuration 3 [-]
|
Configuration 4 [-]
| AND |
|
Configuration 5 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 5 | |||
| httpd-0:2.2.3-63.el5_8.1 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2012:0323 | 2012-02-21T00:00:00Z |
| Red Hat Enterprise Linux 6 | |||
| httpd-0:2.2.15-15.el6_2.1 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2012:0128 | 2012-02-13T00:00:00Z |
| Red Hat JBoss Enterprise Web Server 1 for RHEL 5 | |||
| httpd-0:2.2.17-15.4.ep5.el5 | cpe:/a:redhat:jboss_enterprise_web_server:1::el5 | RHSA-2012:0542 | 2012-05-07T00:00:00Z |
| Red Hat JBoss Enterprise Web Server 1 for RHEL 6 | |||
| httpd-0:2.2.17-15.4.ep5.el6 | cpe:/a:redhat:jboss_enterprise_web_server:1::el6 | RHSA-2012:0542 | 2012-05-07T00:00:00Z |
| Red Hat JBoss Web Server 1.0 | |||
| cpe:/a:redhat:jboss_enterprise_web_server:1.0 | RHSA-2012:0543 | 2012-05-07T00:00:00Z | |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-2405-1 | apache2 security update |
EUVD |
EUVD-2012-0071 | scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon crash during shutdown) or possibly have unspecified other impact by modifying a certain type field within a scoreboard shared memory segment, leading to an invalid call to the free function. |
Ubuntu USN |
USN-1368-1 | Apache HTTP Server vulnerabilities |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 2.8% (2.799% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.