PT-2014-9136 · Apache · Apache-Mod Wsgi

Published 2014-08-08 · Updated 2014-08-08

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions apache-mod wsgi versions prior to 4.2.4

Description The issue is related to an off-by-one error in applying a limit to the number of supplementary groups allowed for a daemon process group. This could lead to memory corruption or a process crash if more groups than the operating system allowed were specified to the supplementary-groups option.

Recommendations For versions prior to 4.2.4, update to version 4.2.4 or later to resolve the issue. As a temporary workaround, consider restricting the number of supplementary groups to prevent memory corruption or process crashes.

Related Identifiers

MGASA-2014-0323

Affected Products

Apache-Mod Wsgi

References · 4

• https://advisories.mageia.org/MGASA-2014-0323.html · Security Note
• https://osv.dev/vulnerability/MGASA-2014-0323 · Vendor Advisory
• https://bugs.mageia.org/show_bug.cgi?id=13831 · Note
• http://lists.opensuse.org/opensuse-updates/2014-07/msg00033.html · Note