PT-2014-9136

Published

2014-08-08

·

Updated

2014-08-08

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

Name of the Vulnerable Software and Affected Versions apache-mod wsgi versions prior to 4.2.4
Description The issue is related to an off-by-one error in applying a limit to the number of supplementary groups allowed for a daemon process group. This could lead to memory corruption or a process crash if more groups than the operating system allowed were specified to the supplementary-groups option.
Recommendations For versions prior to 4.2.4, update to version 4.2.4 or later to resolve the issue. As a temporary workaround, consider restricting the number of supplementary groups to prevent memory corruption or process crashes.
Vendors
Affected products
Related identifiers
MGASA-2014-0323
Found an issue in the description? Have something to add? Feel free to write us 👾