CVE-2014-0242 in mod_wsgi

Résumé (Anglaise)

mod_wsgi module before 3.4 for Apache, when used in embedded mode, might allow remote attackers to obtain sensitive information via the Content-Type header which is generated from memory that may have been freed and then overwritten by a separate thread.

Réserver

03/12/2013

Entrées

VulDB provides additional information and datapoints for this CVE:

ID	Vulnérabilité	CWE	Exp	Con	CVE
146807	mod_wsgi Embedded Mode divulgation d'information	200	Preuve de concept	Correctif officiel	CVE-2014-0242
13299	Apache HTTP Server mod_wsgi divulgation d'information	200	Preuve de concept	Correctif officiel	CVE-2014-0242