Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 603
Alerts This Week
Warning Icon 1 603

Debian 9 DLA-2768-1 Moderate: uwsgi DoS Attack from Memory Issue

debian lts
Calendar Grey September 29, 2021
Dist Debian Esm H88
Upgrade uWSGI on your Debian 9 system to address security vulnerabilities and prevent denial-of-service attacks with these essential steps
It was discovered that the uwsgi proxy module for Apache2 (mod_proxy_uwsgi) can read above the allocated memory when processing a request with a carefully crafted uri-path

Summary

For Debian 9 stretch, this problem has been fixed in version
2.0.14+20161117-3+deb9u4.

We recommend that you upgrade your uwsgi packages.

For the detailed security status of uwsgi please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/uwsgi

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Package: uwsgi
Version: 2.0.14+20161117-3+deb9u4
CVE ID: CVE-2021-36160

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.