https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T23:22:31.496870+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2014-0240 CVE-2014-0240 2026-09-28T23:22:32.841503+00:00

The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid when run on certain Linux kernels, which allows local users to gain privileges via vectors related to the number of running processes.

 https://vulnerability.circl.lu/vuln/usn-2222-1 USN-2222-1 — mod-wsgi vulnerabilities 2026-09-28T23:22:32.841594+00:00

Affected: Ubuntu:14.04:LTS: mod-wsgi

Róbert Kisteleki discovered mod_wsgi incorrectly checked setuid return values. A malicious application could use this issue to cause a local privilege escalation when using daemon mode. (CVE-2014-0240)

Buck Golemon discovered that mod_wsgi used memory that had been freed. A remote attacker could use this issue to read process memory via the Content-Type response header. This issue only affected Ubuntu 12.04 LTS. (CVE-2014-0242)