Summary
USN-5054-1 fixed a vulnerability in uWSGI for Ubuntu 18.04 LTS. This update
provides the corresponding fixes for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
Original advisory details:
Felix Wilhelm discovered a buffer overflow flaw in the mod_proxy_uwsgi module.
An attacker could use this vulnerability to provoke an information disclosure
or potentially remote code execution.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | uwsgi | 1.9.17.1-5ubuntu0.1+esm1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | uwsgi | 2.0.12-5ubuntu3.2+esm1 |
Vulnerabilities 1
-
Unscored —
Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE
References
-
report
https://ubuntu.com/security/CVE-2020-11984