High severity7.5NVD Advisory· Published Dec 9, 2019· Updated Jun 17, 2026

CVE-2014-0242

Description

mod_wsgi module before 3.4 for Apache, when used in embedded mode, might allow remote attackers to obtain sensitive information via the Content-Type header which is generated from memory that may have been freed and then overwritten by a separate thread.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Modwsgi/modwsgi2 versions
cpe:2.3:a:modwsgi:mod_wsgi:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:modwsgi:mod_wsgi:*:*:*:*:*:*:*:*range: <3.4
- (no CPE)range: <3.4
Apache/mod_wsgillm-fuzzy
Range: <3.4
Modx/Mod Wsgiv5
Range: before 3.4

Patches

Vulnerability mechanics

References

blog.dscpl.com.au/2014/05/security-release-for-modwsgi-version-35.htmlnvdRelease NotesThird Party Advisory
modwsgi.readthedocs.org/en/latest/release-notes/version-3.4.htmlnvdRelease NotesVendor Advisory
www.securityfocus.com/bid/67534nvdThird Party AdvisoryVDB Entry
www.openwall.com/lists/oss-security/2014/05/21/1nvdMailing List

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.007
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000