CVE-2014-0242 in mod_wsgi
要約 (英語)
mod_wsgi module before 3.4 for Apache, when used in embedded mode, might allow remote attackers to obtain sensitive information via the Content-Type header which is generated from memory that may have been freed and then overwritten by a separate thread.
予約する
2013年12月03日
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 146807 | mod_wsgi Embedded Mode 情報漏えい | 200 | 概念実証 | 公式な修正 | CVE-2014-0242 |
| 13299 | Apache HTTP Server mod_wsgi 情報漏えい | 200 | 概念実証 | 公式な修正 | CVE-2014-0242 |