CVE-2014-8583 in Mod Wsgi
Summary
mod_wsgi before 4.2.4 for Apache, when creating a daemon process group, does not properly handle when group privileges cannot be dropped, which might allow attackers to gain privileges via unspecified vectors.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
11/04/2014
Disclosure
12/16/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 73254 | Mod Wsgi mod_wsgi 7pk security | 254 | Not defined | Official fix | CVE-2014-8583 |