Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the worker_score and process_score arrays to reference an arbitrary process ID, which is sent a SIGUSR1 signal from the master process, aka "SIGUSR1 killer."
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Httpd | — | Upgrade to the latest version of Apache HTTPD | Apr 12, 2012 | Jun 20, 2007 |
| Apache Httpd 2_0_x Signals To Arbitrary Processes | — | — | Aug 16, 2010 | Jun 20, 2007 |
| Apache Httpd 2_2_x Signals To Arbitrary Processes | — | — | Aug 16, 2010 | Jun 20, 2007 |
| Debian | — | Upgrade apache2 | Jul 30, 2024 | Jun 20, 2007 |
| Freebsd | — | Upgrade apache | Dec 10, 2025 | Sep 11, 2007 |
| Gentoo Linux | — | Upgrade www-servers/apache. | Oct 30, 2017 | Jun 20, 2007 |
| Oracle_linux | — | Upgrade mod_sslUpgrade httpd-manualUpgrade httpdUpgrade httpd-devel | Oct 16, 2024 | Jun 20, 2007 |
| Suse | — | Upgrade apache2-docUpgrade apache2-example-pagesUpgrade apache2-preforkUpgrade apache2-eventUpgrade apache2-utilsUpgrade apache2-manualUpgrade apache2Upgrade apache2-workerUpgrade apache2-devel | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade apache2-mpm-workerUpgrade apache2-mpm-preforkUpgrade apache2.2-commonUpgrade apache2-common | Nov 8, 2024 | Jun 20, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub