https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 17:59:42 +0000 https://vulnerability.circl.lu/vuln/cve-2014-0242 <p><strong>Affected:</strong> mod_wsgi</p> <p>mod_wsgi module before 3.4 for Apache, when used in embedded mode, might allow remote attackers to obtain sensitive information via the Content-Type header which is generated from memory that may have been freed and then overwritten by a separate thread.</p> <p><strong>Affected:</strong> mod_wsgi</p> <p>mod_wsgi module before 3.4 for Apache, when used in embedded mode, might allow remote attackers to obtain sensitive information via the Content-Type header which is generated from memory that may have been freed and then overwritten by a separate thread.</p> https://vulnerability.circl.lu/vuln/cve-2014-0242 https://vulnerability.circl.lu/vuln/usn-2222-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: mod-wsgi</p> <p>Róbert Kisteleki discovered mod_wsgi incorrectly checked setuid return values. A malicious application could use this issue to cause a local privilege escalation when using daemon mode. (CVE-2014-0240)</p> <p>Buck Golemon discovered that mod_wsgi used memory that had been freed. A remote attacker could use this issue to read process memory via the Content-Type response header. This issue only affected Ubuntu 12.04 LTS. (CVE-2014-0242)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: mod-wsgi</p> <p>Róbert Kisteleki discovered mod_wsgi incorrectly checked setuid return values. A malicious application could use this issue to cause a local privilege escalation when using daemon mode. (CVE-2014-0240)</p> <p>Buck Golemon discovered that mod_wsgi used memory that had been freed. A remote attacker could use this issue to read process memory via the Content-Type response header. This issue only affected Ubuntu 12.04 LTS. (CVE-2014-0242)</p> https://vulnerability.circl.lu/vuln/usn-2222-1