Red Hat Security AdvisoryRHSA-2014:0788
mod_wsgi security update
Released 2014-06-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Optional (v. 6) mod_wsgi-3.2-6.el6_5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) mod_wsgi-3.2-6.el6_5
- Red Hat Enterprise Linux Server (v. 6) mod_wsgi-3.2-6.el6_5
- Red Hat Enterprise Linux Workstation (v. 6) mod_wsgi-3.2-6.el6_5
Fixes 2 records
Priority MEDIUM 44
mod_wsgi module before 3.4 for Apache, when used in embedded mode, might allow remote attackers to obtain sensitive information via the Content-Type header which is generated from memory that may have been freed and then…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.08526 · Published 2019-12-09 · Partial fix · 3.4 CWE-200
Priority LOW 28
The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid when run on certain Linux kernels, which allows local users to gain privileges via vectors r…
CVSS 2.0MEDIUM 6.2· Local · No auth · Interaction — · EPSS 0.00411 · Published 2014-05-27 · Partial fix CWE-264
