CVE-2012-0031: apache http_server

EPSS trend

Probability

2.80%

Chance of exploitation in the next 30 days

Percentile

86%

Versus all other CVEs

30-day change

0.00 pp

From 2.80% on 18-09-2026

18-09-202618-10-2026

EPSS score

2.80%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (halfdog.net)
Maturity: unknown
exploit-databasedoslinuxUnverified
Apache 2.2 - Scoreboard Invalid Free On Shutdown
Maturity: poc

References

42 links

secunia.com/advisories/47410Third Party AdvisoryX Refsource SECUNIANot ApplicableVendor Advisory
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041Vendor AdvisoryX Refsource HPBroken Link
marc.info?l=bugtraq&m=134987041210674&w=2Vendor AdvisoryX Refsource HPIssue TrackingMailing ListThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2012:012Vendor AdvisoryX Refsource MANDRIVABroken Link
rhn.redhat.com/errata/RHSA-2012-0543.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
svn.apache.org/viewvc?view=revision&revision=1230065X Refsource CONFIRMVendor Advisory
www.securityfocus.com/bid/51407VDB EntryX Refsource BIDThird Party Advisory
marc.info?l=bugtraq&m=133294460209056&w=2Vendor AdvisoryX Refsource HPIssue TrackingMailing ListThird Party Advisory
rhn.redhat.com/errata/RHSA-2012-0128.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
rhn.redhat.com/errata/RHSA-2012-0542.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory

Show all 42 references

lists.apple.com/archives/security-announce/2012/Sep/msg00004.htmlVendor AdvisoryX Refsource APPLEBroken LinkMailing List
support.apple.com/kb/HT5501X Refsource CONFIRMThird Party Advisory
www.oracle.com/technetwork/topics/security/cpujul2012-392727.htmlX Refsource CONFIRMThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=773744X Refsource CONFIRMIssue TrackingThird Party Advisory
marc.info?l=bugtraq&m=133494237717847&w=2Vendor AdvisoryX Refsource HPIssue TrackingMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2012-02/msg00026.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2013:150Vendor AdvisoryX Refsource MANDRIVABroken Link
secunia.com/advisories/48551Third Party AdvisoryX Refsource SECUNIANot Applicable
www.debian.org/security/2012/dsa-2405Vendor AdvisoryX Refsource DEBIANThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2012-03/msg00002.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.halfdog.net/Security/2011/ApacheScoreboardInvalidFreeOnShutdown/X Refsource MISCExploitThird Party Advisory
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
security-tracker.debian.org/tracker/CVE-2012-0031Advisory

Related vulnerabilities

CVE-2018-1302apache software foundationapache http server+912.88%8y ago26-03-2018 15:00When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2.4.30 could have written a NULL pointer potentially to an already freed memory. The memory pools maintained by the server make this vulnerability hard to trigger in usual configurations, the reporter and the team could not reproduce it outside debug builds, so it is classified as low risk.CVE-2018-1333apache software foundationapache http server+1117.10%8y ago18-06-2018 18:00By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker exhaustion and a denial of service. Fixed in Apache HTTP Server 2.4.34 (Affected 2.4.18-2.4.30,2.4.33).CVE-2018-1303apache software foundationapache http server+1069.80%8y ago26-03-2018 15:00A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out of bound read while preparing data to be cached in shared memory. It could be used as a Denial of Service attack against users of mod_cache_socache. The vulnerability is considered as low risk since mod_cache_socache is not widely used, mod_cache_disk is not concerned by this vulnerability.CVE-2018-1301apache software foundationapache http server+1114.99%8y ago26-03-2018 15:00A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size limit is reached by reading the HTTP header. This vulnerability is considered very hard if not impossible to trigger in non-debug mode (both log and build level), so it is classified as low risk for common server usage.CVE-2018-19200debianuriparser+32.48%7y ago12-11-2018 15:00An issue was discovered in uriparser before 0.9.0. UriCommon.c allows attempted operations on NULL input via a uriResetUri* function.CVE-2018-11763apache software foundationapache http server+2450.85%8y ago25-09-2018 21:00In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without any connection timeout coming to effect. This affects only HTTP/2 connections. A possible mitigation is to not enable the h2 protocol.

All vulnerabilities inhttp_server debian_linux opensuse enterprise_linux_desktop enterprise_linux_eus

CVE-2012-0031: apache http_server

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References