Unrated severityNVD Advisory· Published May 27, 2014· Updated Jun 17, 2026
CVE-2014-0240
CVE-2014-0240
Description
The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid when run on certain Linux kernels, which allows local users to gain privileges via vectors related to the number of running processes.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
22cpe:2.3:a:modwsgi:mod_wsgi:*:*:*:*:*:*:*:*+ 21 more
- cpe:2.3:a:modwsgi:mod_wsgi:*:*:*:*:*:*:*:*range: <=3.4
- cpe:2.3:a:modwsgi:mod_wsgi:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:modwsgi:mod_wsgi:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:modwsgi:mod_wsgi:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:modwsgi:mod_wsgi:1.3:*:*:*:*:*:*:*
- cpe:2.3:a:modwsgi:mod_wsgi:1.4:*:*:*:*:*:*:*
- cpe:2.3:a:modwsgi:mod_wsgi:1.5:*:*:*:*:*:*:*
- cpe:2.3:a:modwsgi:mod_wsgi:1.6:*:*:*:*:*:*:*
- cpe:2.3:a:modwsgi:mod_wsgi:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:modwsgi:mod_wsgi:2.1:*:*:*:*:*:*:*
- cpe:2.3:a:modwsgi:mod_wsgi:2.2:*:*:*:*:*:*:*
- cpe:2.3:a:modwsgi:mod_wsgi:2.3:*:*:*:*:*:*:*
- cpe:2.3:a:modwsgi:mod_wsgi:2.4:*:*:*:*:*:*:*
- cpe:2.3:a:modwsgi:mod_wsgi:2.5:*:*:*:*:*:*:*
- cpe:2.3:a:modwsgi:mod_wsgi:2.6:*:*:*:*:*:*:*
- cpe:2.3:a:modwsgi:mod_wsgi:2.7:*:*:*:*:*:*:*
- cpe:2.3:a:modwsgi:mod_wsgi:2.8:*:*:*:*:*:*:*
- cpe:2.3:a:modwsgi:mod_wsgi:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:modwsgi:mod_wsgi:3.1:*:*:*:*:*:*:*
- cpe:2.3:a:modwsgi:mod_wsgi:3.2:*:*:*:*:*:*:*
- cpe:2.3:a:modwsgi:mod_wsgi:3.3:*:*:*:*:*:*:*
- (no CPE)range: <3.5
Patches
Vulnerability mechanics
References
7- blog.dscpl.com.au/2014/05/security-release-for-modwsgi-version-35.htmlnvd
- modwsgi.readthedocs.org/en/latest/release-notes/version-3.5.htmlnvd
- rhn.redhat.com/errata/RHSA-2014-0789.htmlnvd
- secunia.com/advisories/59551nvd
- secunia.com/advisories/60094nvd
- www.openwall.com/lists/oss-security/2014/05/21/1nvd
- www.securityfocus.com/bid/67532nvd
News mentions
0No linked articles in our index yet.