Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-0240HistoryMay 27, 2014 - 3:00 p.m.
CVE-2014-0240
2014-05-2715:00:00
Debian Security Bug Tracker
security-tracker.debian.org
7
CVSS2
6.2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:C/I:C/A:C
EPSS
0
Percentile
5.1%
The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid when run on certain Linux kernels, which allows local users to gain privileges via vectors related to the number of running processes.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | mod-wsgi | < 3.5-1 | mod-wsgi_3.5-1_all.deb |
| Debian | 11 | all | mod-wsgi | < 3.5-1 | mod-wsgi_3.5-1_all.deb |
| Debian | 999 | all | mod-wsgi | < 3.5-1 | mod-wsgi_3.5-1_all.deb |
| Debian | 13 | all | mod-wsgi | < 3.5-1 | mod-wsgi_3.5-1_all.deb |
Related
openvas
openvas
CentOS Update for mod_wsgi CESA-2014:1091 centos7
2014-09-10 00:00:00
Oracle: Security Advisory (ELSA-2014-1091)
2015-10-06 00:00:00
RedHat Update for mod_wsgi RHSA-2014:1091-01
2014-08-26 00:00:00
oraclelinux
oraclelinux
mod_wsgi security update
2014-08-25 00:00:00
mod_wsgi security update
2014-06-25 00:00:00
nessus
nessus
RHEL 7 : mod_wsgi (RHSA-2014:1091)
2014-08-26 00:00:00
Apache mod_wsgi < 3.5 Apache Process Privilege Escalation
2014-07-14 00:00:00
Oracle Linux 7 : mod_wsgi (ELSA-2014-1091)
2014-08-26 00:00:00
centos
centos
mod_wsgi security update
2014-08-25 12:17:55
mod_wsgi security update
2014-06-25 19:01:10
cvelist
cvelist
CVE-2014-0240
2014-05-27 15:00:00
nvd
nvd
CVE-2014-0240
2014-05-27 14:55:12
redhat
redhat
(RHSA-2014:0789) Important: python27-mod_wsgi and python33-mod_wsgi security update
2014-06-25 00:00:00
(RHSA-2014:1091) Important: mod_wsgi security update
2014-08-25 00:00:00
(RHSA-2014:0788) Important: mod_wsgi security update
2014-06-25 00:00:00
ubuntucve
ubuntucve
CVE-2014-0240
2014-05-23 00:00:00
cve
cve
CVE-2014-0240
2014-05-27 15:00:00
veracode
veracode
Privilege Escalation
2019-01-15 08:54:30
prion
prion
Code injection
2014-05-27 14:55:00
securityvulns
securityvulns
mod-wsgi security vulnerabilities
2014-05-29 00:00:00
[SECURITY] [DSA 2937-1] mod-wsgi security update
2014-05-29 00:00:00
amazon
amazon
Important: mod_wsgi
2014-07-09 23:07:00
Important: mod24_wsgi
2014-07-09 23:02:00
gentoo
gentoo
mod_wsgi: Privilege escalation
2014-12-13 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: mod_wsgi-3.5-1.fc20
2014-06-17 23:26:05
[SECURITY] Fedora 19 Update: mod_wsgi-3.5-1.fc19
2014-06-17 23:35:19
osv
osv
mod-wsgi - security update
2014-05-27 00:00:00
debian
debian
[SECURITY] [DSA 2937-1] mod-wsgi security update
2014-05-27 14:35:16
ubuntu
ubuntu
mod_wsgi vulnerabilities
2014-05-26 00:00:00
CVSS2
6.2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:C/I:C/A:C
EPSS
0
Percentile
5.1%
Related for DEBIANCVE:CVE-2014-0240