Summary
It was discovered that mod_wsgi incorrectly handled errors when setting up
the working directory and group access rights. A malicious application
could possibly use this issue to cause a local privilege escalation when
using daemon mode.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | mod-wsgi | 3.4-4ubuntu2.1.14.04.2 |
Vulnerabilities 1
-
Unscored —
mod_wsgi before 4.2.4 for Apache, when creating a daemon process group, does not properly handle when group privileges …
References
-
report
https://ubuntu.com/security/CVE-2014-8583