CVE-2014-0242

2019-12-0919:33:29

redhat

www.cve.org

7.3 High

AI Score

Confidence

High

0.071 Low

EPSS

Percentile

94.0%

JSON

mod_wsgi module before 3.4 for Apache, when used in embedded mode, might allow remote attackers to obtain sensitive information via the Content-Type header which is generated from memory that may have been freed and then overwritten by a separate thread.

CNA Affected

[
  {
    "product": "mod_wsgi",
    "vendor": "mod_wsgi",
    "versions": [
      {
        "status": "affected",
        "version": "before 3.4"
      }
    ]
  }
]