CVE-2014-0242
HIGHmod_wsgi < 3.4 - Exposure of Sensitive Information via Content-Type Header
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2014-0242. PoCs published by Buck Golemon.
AI-analyzed exploit summary This exploit demonstrates a memory exhaustion attack against mod_wsgi by continuously generating large lists of strings, leading to a denial-of-service (DoS) condition. The code also includes a WSGI application that may be used to trigger the vulnerability in a web server context.
Description
mod_wsgi module before 3.4 for Apache, when used in embedded mode, might allow remote attackers to obtain sensitive information via the Content-Type header which is generated from memory that may have been freed and then overwritten by a separate thread.
Exploits (1)
This exploit demonstrates a memory exhaustion attack against mod_wsgi by continuously generating large lists of strings, leading to a denial-of-service (DoS) condition. The code also includes a WSGI application that may be used to trigger the vulnerability in a web server context.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N