CVE-2012-0031: Apache HTTP Server

Medium severity, CVSS 4.6. EPSS: 2.8% chance of exploitation in the next 30 days.

scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon crash during shutdown) or possibly have unspecified other impact by modifying a certain type field within a scoreboard shared memory segment, leading to an invalid call to the free function.

Affected products

• Apache HTTP Server: from 2.0.0, before 2.0.65 (fixed in 2.0.65); from 2.2.0, before 2.2.22 (fixed in 2.2.22)
• Debian Debian Linux: version 5.0 only; version 6.0 only; version 7.0 only
• Opensuse Opensuse: version 11.4 only
• Red Hat Enterprise Linux Desktop: version 6.0 only
• Red Hat Enterprise Linux Eus: version 6.2 only
• Red Hat Enterprise Linux Server: version 6.0 only
• Red Hat Enterprise Linux Server Aus: version 6.2 only
• Red Hat Enterprise Linux Workstation: version 6.0 only
• Red Hat JBoss Enterprise Web Server: version 1.0.0 only
• Red Hat Storage: version 2.0 only
• Suse Linux Enterprise Server: version 10 only
• Suse Linux Enterprise Software Development Kit: version 10 only

Published 2012-01-18. Last modified 2026-06-16.