Search CVE reports
1 – 3 of 3 results
CVE-2020-11984
Medium priorityApache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE
2 affected packages
apache2, uwsgi
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| apache2 | — | Fixed | Fixed | Not affected | Not affected |
| uwsgi | — | Not affected | Not affected | Fixed | Fixed |
CVE-2018-7490
Medium prioritySome fixes available 3 of 4
uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal.
1 affected packages
uwsgi
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| uwsgi | — | — | — | Fixed | Fixed |
CVE-2018-6758
Medium prioritySome fixes available 2 of 3
The uwsgi_expand_path function in core/utils.c in Unbit uWSGI through 2.0.15 has a stack-based buffer overflow via a large directory length.
1 affected packages
uwsgi
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| uwsgi | — | — | — | Not affected | Fixed |