← back
CVE-2014-0242

CVE-2014-0242

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 8.5%
from disclosure to weapon0 days
Published on NVDDec 9
1st PoCMay 21
exploitation probability
8.5%top 6% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
mod_wsgi module before 3.4 for Apache, when used in embedded mode, might allow remote attackers to obtain sensitive information via the Content-Type header which is generated from memory that may have been freed and then overwritten by a separate thread.
Affected products
mod_wsgi · mod_wsgi
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.