CVE-2014-0240 The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid when run on certain Linux kernels, which allows local users to gain priv...
MediumCVSS 6.2
EPSS 0.41%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid when run on certain Linux kernels, which allows local users to gain privileges via vectors related to the number of running processes.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/mod-wsgi(Debian:12) | < 3.5-1 | 3.5-1 |
| debian/mod-wsgi(Debian:13) | < 3.5-1 | 3.5-1 |
| debian/mod-wsgi(Debian:14) | < 3.5-1 | 3.5-1 |
| modwsgi mod wsgi | <= 3.4 | No fix listed |
| modwsgi mod wsgi | = 1.0 | No fix listed |
| modwsgi mod wsgi | = 1.1 | No fix listed |
| modwsgi mod wsgi | = 1.2 | No fix listed |
| modwsgi mod wsgi | = 1.3 | No fix listed |
| modwsgi mod wsgi | = 1.4 | No fix listed |
| modwsgi mod wsgi | = 1.5 | No fix listed |
| modwsgi mod wsgi | = 1.6 | No fix listed |
| modwsgi mod wsgi | = 2.0 | No fix listed |
| modwsgi mod wsgi | = 2.1 | No fix listed |
| modwsgi mod wsgi | = 2.2 | No fix listed |
| modwsgi mod wsgi | = 2.3 | No fix listed |
| modwsgi mod wsgi | = 2.4 | No fix listed |
| modwsgi mod wsgi | = 2.5 | No fix listed |
| modwsgi mod wsgi | = 2.6 | No fix listed |
| modwsgi mod wsgi | = 2.7 | No fix listed |
| modwsgi mod wsgi | = 2.8 | No fix listed |
| modwsgi mod wsgi | = 3.0 | No fix listed |
| modwsgi mod wsgi | = 3.1 | No fix listed |
| modwsgi mod wsgi | = 3.2 | No fix listed |
| modwsgi mod wsgi | = 3.3 | No fix listed |
References
- Debian Security Tracker CVE-2014-0240 vendor-advisory
- blog.dscpl.com.au
- modwsgi.readthedocs.org
- RHSA-2014:0789 vendor-advisory
- 59551 third-party-advisory
- 60094 third-party-advisory
- [oss-security] 20140521 Security release for mod_wsgi (version 3.5) mailing-list
- 67532 vdb-entry
- bugs.debian.org issue-tracking