CVE-2014-8583 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2014-8583 Interim 1 13 2024-02-21T01:52:32Z current 2021-05-30T13:24:09Z 2024-02-21T01:52:32Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2014-8583 mod_wsgi before 4.2.4 for Apache, when creating a daemon process group, does not properly handle when group privileges cannot be dropped, which might allow attackers to gain privileges via unspecified vectors. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-updates/2015-March/002829.html E-Mail link for SUSE-RU-2015:0611-1 https://lists.suse.com/pipermail/sle-security-updates/2014-December/001097.html E-Mail link for SUSE-SU-2014:1572-1 https://lists.suse.com/pipermail/sle-security-updates/2014-December/001104.html E-Mail link for SUSE-SU-2014:1572-2 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Manager 1.7 SUSE Manager 2.1 SUSE Manager Proxy 1.7 SUSE Manager Proxy 2.1 SUSE OpenStack Cloud 3.0 SUSE OpenStack Cloud 4 apache2-mod_wsgi-3.3-5.7.1 apache2-mod_wsgi-3.3-5.7.17 auditlog-keeper-0.2.3+git.1417708457.eabd1a9-0.7.58 auditlog-keeper-rdbms-0.2.3+git.1417708457.eabd1a9-0.7.58 auditlog-keeper-spacewalk-validator-0.2.3+git.1417708457.eabd1a9-0.7.58 auditlog-keeper-syslog-0.2.3+git.1417708457.eabd1a9-0.7.58 auditlog-keeper-xmlout-0.2.3+git.1417708457.eabd1a9-0.7.58 cobbler-2.2.2-0.54.9 google-gson-2.2.4-0.7.52 libyaml-0-2-0.1.3-0.10.16.11 oracle-config-1.1-0.10.10.16 osa-dispatcher-5.11.33.7-0.7.16 perl-Class-Singleton-1.4-4.13.38 perl-NOCpulse-Object-1.26.13.2-0.7.13 perl-Satcon-1.20.2-0.7.6 perl-auditlog-keeper-client-0.2.3+git.1417708457.eabd1a9-0.7.58 postgresql91-pltcl-9.1.15-0.3.1 pxe-default-image-0.1-0.20.56 python-enum34-1.0-0.7.33 python-gzipstream-1.10.2.2-0.7.6 rhn-custom-info-5.4.22.6-0.7.13 rhnlib-2.5.69.6-0.7.6 rhnmd-5.3.18.4-0.7.15 rhnpush-5.5.71.7-0.7.16 sm-ncc-sync-data-2.1.9-0.7.6 smdba-1.5.1-0.7.6 spacecmd-2.1.25.7-0.7.9 spacewalk-admin-2.1.2.4-0.7.6 spacewalk-backend-2.1.55.15-0.7.11 spacewalk-backend-app-2.1.55.15-0.7.11 spacewalk-backend-applet-2.1.55.15-0.7.11 spacewalk-backend-config-files-2.1.55.15-0.7.11 spacewalk-backend-config-files-common-2.1.55.15-0.7.11 spacewalk-backend-config-files-tool-2.1.55.15-0.7.11 spacewalk-backend-iss-2.1.55.15-0.7.11 spacewalk-backend-iss-export-2.1.55.15-0.7.11 spacewalk-backend-libs-2.1.55.15-0.7.11 spacewalk-backend-package-push-server-2.1.55.15-0.7.11 spacewalk-backend-server-2.1.55.15-0.7.11 spacewalk-backend-sql-2.1.55.15-0.7.11 spacewalk-backend-sql-oracle-2.1.55.15-0.7.11 spacewalk-backend-sql-postgresql-2.1.55.15-0.7.11 spacewalk-backend-tools-2.1.55.15-0.7.11 spacewalk-backend-xml-export-libs-2.1.55.15-0.7.11 spacewalk-backend-xmlrpc-2.1.55.15-0.7.11 spacewalk-base-2.1.60.12-0.7.7 spacewalk-base-minimal-2.1.60.12-0.7.7 spacewalk-base-minimal-config-2.1.60.12-0.7.7 spacewalk-branding-2.1.33.10-0.7.16 spacewalk-certs-tools-2.1.6.5-0.7.10 spacewalk-check-2.1.16.6-0.7.9 spacewalk-client-setup-2.1.16.6-0.7.9 spacewalk-client-tools-2.1.16.6-0.7.9 spacewalk-config-2.1.5.4-0.7.15 spacewalk-doc-indexes-2.1.2.3-0.7.26 spacewalk-grail-2.1.60.12-0.7.7 spacewalk-html-2.1.60.12-0.7.7 spacewalk-java-2.1.165.14-0.7.16 spacewalk-java-config-2.1.165.14-0.7.16 spacewalk-java-lib-2.1.165.14-0.7.16 spacewalk-java-oracle-2.1.165.14-0.7.16 spacewalk-java-postgresql-2.1.165.14-0.7.16 spacewalk-pxt-2.1.60.12-0.7.7 spacewalk-reports-2.1.14.8-0.7.10 spacewalk-search-2.1.14.6-0.7.18 spacewalk-setup-2.1.14.9-0.7.6 spacewalk-setup-jabberd-2.1.0.2-0.7.6 spacewalk-sniglets-2.1.60.12-0.7.7 spacewalk-taskomatic-2.1.165.14-0.7.16 spacewalk-utils-2.1.27.12-0.7.25 spacewalksd-5.0.14.6-0.7.15 struts-1.2.9-162.33.22 supportutils-plugin-susemanager-1.0.3-0.5.5 supportutils-plugin-susemanager-client-1.0.4-0.5.5 suseRegisterInfo-2.1.9-0.7.29 susemanager-2.1.17-0.7.11 susemanager-client-config_en-pdf-2.1-0.15.24 susemanager-install_en-pdf-2.1-0.15.24 susemanager-jsp_en-2.1-0.15.23 susemanager-manuals_en-2.1-0.15.24 susemanager-proxy-quick_en-pdf-2.1-0.15.24 susemanager-reference_en-pdf-2.1-0.15.24 susemanager-schema-2.1.50.11-0.7.8 susemanager-sync-data-2.1.5-0.7.6 susemanager-tools-2.1.17-0.7.11 susemanager-user_en-pdf-2.1-0.15.24 tanukiwrapper-3.2.3-0.10.12 yum-3.2.29-0.19.30 yum-common-3.2.29-0.19.30 zypp-plugin-spacewalk-0.9.8-0.15.51 apache2-mod_wsgi-3.3-5.7.1 as a component of SUSE Manager 1.7 apache2-mod_wsgi-3.3-5.7.17 as a component of SUSE Manager 2.1 auditlog-keeper-0.2.3+git.1417708457.eabd1a9-0.7.58 as a component of SUSE Manager 2.1 auditlog-keeper-rdbms-0.2.3+git.1417708457.eabd1a9-0.7.58 as a component of SUSE Manager 2.1 auditlog-keeper-spacewalk-validator-0.2.3+git.1417708457.eabd1a9-0.7.58 as a component of SUSE Manager 2.1 auditlog-keeper-syslog-0.2.3+git.1417708457.eabd1a9-0.7.58 as a component of SUSE Manager 2.1 auditlog-keeper-xmlout-0.2.3+git.1417708457.eabd1a9-0.7.58 as a component of SUSE Manager 2.1 cobbler-2.2.2-0.54.9 as a component of SUSE Manager 2.1 google-gson-2.2.4-0.7.52 as a component of SUSE Manager 2.1 libyaml-0-2-0.1.3-0.10.16.11 as a component of SUSE Manager 2.1 oracle-config-1.1-0.10.10.16 as a component of SUSE Manager 2.1 osa-dispatcher-5.11.33.7-0.7.16 as a component of SUSE Manager 2.1 perl-Class-Singleton-1.4-4.13.38 as a component of SUSE Manager 2.1 perl-NOCpulse-Object-1.26.13.2-0.7.13 as a component of SUSE Manager 2.1 perl-Satcon-1.20.2-0.7.6 as a component of SUSE Manager 2.1 perl-auditlog-keeper-client-0.2.3+git.1417708457.eabd1a9-0.7.58 as a component of SUSE Manager 2.1 postgresql91-pltcl-9.1.15-0.3.1 as a component of SUSE Manager 2.1 pxe-default-image-0.1-0.20.56 as a component of SUSE Manager 2.1 python-enum34-1.0-0.7.33 as a component of SUSE Manager 2.1 python-gzipstream-1.10.2.2-0.7.6 as a component of SUSE Manager 2.1 rhn-custom-info-5.4.22.6-0.7.13 as a component of SUSE Manager 2.1 rhnlib-2.5.69.6-0.7.6 as a component of SUSE Manager 2.1 rhnmd-5.3.18.4-0.7.15 as a component of SUSE Manager 2.1 rhnpush-5.5.71.7-0.7.16 as a component of SUSE Manager 2.1 sm-ncc-sync-data-2.1.9-0.7.6 as a component of SUSE Manager 2.1 smdba-1.5.1-0.7.6 as a component of SUSE Manager 2.1 spacecmd-2.1.25.7-0.7.9 as a component of SUSE Manager 2.1 spacewalk-admin-2.1.2.4-0.7.6 as a component of SUSE Manager 2.1 spacewalk-backend-2.1.55.15-0.7.11 as a component of SUSE Manager 2.1 spacewalk-backend-app-2.1.55.15-0.7.11 as a component of SUSE Manager 2.1 spacewalk-backend-applet-2.1.55.15-0.7.11 as a component of SUSE Manager 2.1 spacewalk-backend-config-files-2.1.55.15-0.7.11 as a component of SUSE Manager 2.1 spacewalk-backend-config-files-common-2.1.55.15-0.7.11 as a component of SUSE Manager 2.1 spacewalk-backend-config-files-tool-2.1.55.15-0.7.11 as a component of SUSE Manager 2.1 spacewalk-backend-iss-2.1.55.15-0.7.11 as a component of SUSE Manager 2.1 spacewalk-backend-iss-export-2.1.55.15-0.7.11 as a component of SUSE Manager 2.1 spacewalk-backend-libs-2.1.55.15-0.7.11 as a component of SUSE Manager 2.1 spacewalk-backend-package-push-server-2.1.55.15-0.7.11 as a component of SUSE Manager 2.1 spacewalk-backend-server-2.1.55.15-0.7.11 as a component of SUSE Manager 2.1 spacewalk-backend-sql-2.1.55.15-0.7.11 as a component of SUSE Manager 2.1 spacewalk-backend-sql-oracle-2.1.55.15-0.7.11 as a component of SUSE Manager 2.1 spacewalk-backend-sql-postgresql-2.1.55.15-0.7.11 as a component of SUSE Manager 2.1 spacewalk-backend-tools-2.1.55.15-0.7.11 as a component of SUSE Manager 2.1 spacewalk-backend-xml-export-libs-2.1.55.15-0.7.11 as a component of SUSE Manager 2.1 spacewalk-backend-xmlrpc-2.1.55.15-0.7.11 as a component of SUSE Manager 2.1 spacewalk-base-2.1.60.12-0.7.7 as a component of SUSE Manager 2.1 spacewalk-base-minimal-2.1.60.12-0.7.7 as a component of SUSE Manager 2.1 spacewalk-base-minimal-config-2.1.60.12-0.7.7 as a component of SUSE Manager 2.1 spacewalk-branding-2.1.33.10-0.7.16 as a component of SUSE Manager 2.1 spacewalk-certs-tools-2.1.6.5-0.7.10 as a component of SUSE Manager 2.1 spacewalk-check-2.1.16.6-0.7.9 as a component of SUSE Manager 2.1 spacewalk-client-setup-2.1.16.6-0.7.9 as a component of SUSE Manager 2.1 spacewalk-client-tools-2.1.16.6-0.7.9 as a component of SUSE Manager 2.1 spacewalk-config-2.1.5.4-0.7.15 as a component of SUSE Manager 2.1 spacewalk-doc-indexes-2.1.2.3-0.7.26 as a component of SUSE Manager 2.1 spacewalk-grail-2.1.60.12-0.7.7 as a component of SUSE Manager 2.1 spacewalk-html-2.1.60.12-0.7.7 as a component of SUSE Manager 2.1 spacewalk-java-2.1.165.14-0.7.16 as a component of SUSE Manager 2.1 spacewalk-java-config-2.1.165.14-0.7.16 as a component of SUSE Manager 2.1 spacewalk-java-lib-2.1.165.14-0.7.16 as a component of SUSE Manager 2.1 spacewalk-java-oracle-2.1.165.14-0.7.16 as a component of SUSE Manager 2.1 spacewalk-java-postgresql-2.1.165.14-0.7.16 as a component of SUSE Manager 2.1 spacewalk-pxt-2.1.60.12-0.7.7 as a component of SUSE Manager 2.1 spacewalk-reports-2.1.14.8-0.7.10 as a component of SUSE Manager 2.1 spacewalk-search-2.1.14.6-0.7.18 as a component of SUSE Manager 2.1 spacewalk-setup-2.1.14.9-0.7.6 as a component of SUSE Manager 2.1 spacewalk-setup-jabberd-2.1.0.2-0.7.6 as a component of SUSE Manager 2.1 spacewalk-sniglets-2.1.60.12-0.7.7 as a component of SUSE Manager 2.1 spacewalk-taskomatic-2.1.165.14-0.7.16 as a component of SUSE Manager 2.1 spacewalk-utils-2.1.27.12-0.7.25 as a component of SUSE Manager 2.1 spacewalksd-5.0.14.6-0.7.15 as a component of SUSE Manager 2.1 struts-1.2.9-162.33.22 as a component of SUSE Manager 2.1 supportutils-plugin-susemanager-1.0.3-0.5.5 as a component of SUSE Manager 2.1 supportutils-plugin-susemanager-client-1.0.4-0.5.5 as a component of SUSE Manager 2.1 suseRegisterInfo-2.1.9-0.7.29 as a component of SUSE Manager 2.1 susemanager-2.1.17-0.7.11 as a component of SUSE Manager 2.1 susemanager-client-config_en-pdf-2.1-0.15.24 as a component of SUSE Manager 2.1 susemanager-install_en-pdf-2.1-0.15.24 as a component of SUSE Manager 2.1 susemanager-jsp_en-2.1-0.15.23 as a component of SUSE Manager 2.1 susemanager-manuals_en-2.1-0.15.24 as a component of SUSE Manager 2.1 susemanager-proxy-quick_en-pdf-2.1-0.15.24 as a component of SUSE Manager 2.1 susemanager-reference_en-pdf-2.1-0.15.24 as a component of SUSE Manager 2.1 susemanager-schema-2.1.50.11-0.7.8 as a component of SUSE Manager 2.1 susemanager-sync-data-2.1.5-0.7.6 as a component of SUSE Manager 2.1 susemanager-tools-2.1.17-0.7.11 as a component of SUSE Manager 2.1 susemanager-user_en-pdf-2.1-0.15.24 as a component of SUSE Manager 2.1 tanukiwrapper-3.2.3-0.10.12 as a component of SUSE Manager 2.1 yum-3.2.29-0.19.30 as a component of SUSE Manager 2.1 yum-common-3.2.29-0.19.30 as a component of SUSE Manager 2.1 zypp-plugin-spacewalk-0.9.8-0.15.51 as a component of SUSE Manager 2.1 apache2-mod_wsgi-3.3-5.7.1 as a component of SUSE Manager Proxy 1.7 apache2-mod_wsgi-3.3-5.7.1 as a component of SUSE Manager Proxy 2.1 apache2-mod_wsgi-3.3-5.7.1 as a component of SUSE OpenStack Cloud 3.0 apache2-mod_wsgi-3.3-5.7.1 as a component of SUSE OpenStack Cloud 4 mod_wsgi before 4.2.4 for Apache, when creating a daemon process group, does not properly handle when group privileges cannot be dropped, which might allow attackers to gain privileges via unspecified vectors. CVE-2014-8583 SUSE Manager 1.7:apache2-mod_wsgi-3.3-5.7.1 SUSE Manager 2.1:apache2-mod_wsgi-3.3-5.7.17 SUSE Manager 2.1:auditlog-keeper-0.2.3+git.1417708457.eabd1a9-0.7.58 SUSE Manager 2.1:auditlog-keeper-rdbms-0.2.3+git.1417708457.eabd1a9-0.7.58 SUSE Manager 2.1:auditlog-keeper-spacewalk-validator-0.2.3+git.1417708457.eabd1a9-0.7.58 SUSE Manager 2.1:auditlog-keeper-syslog-0.2.3+git.1417708457.eabd1a9-0.7.58 SUSE Manager 2.1:auditlog-keeper-xmlout-0.2.3+git.1417708457.eabd1a9-0.7.58 SUSE Manager 2.1:cobbler-2.2.2-0.54.9 SUSE Manager 2.1:google-gson-2.2.4-0.7.52 SUSE Manager 2.1:libyaml-0-2-0.1.3-0.10.16.11 SUSE Manager 2.1:oracle-config-1.1-0.10.10.16 SUSE Manager 2.1:osa-dispatcher-5.11.33.7-0.7.16 SUSE Manager 2.1:perl-Class-Singleton-1.4-4.13.38 SUSE Manager 2.1:perl-NOCpulse-Object-1.26.13.2-0.7.13 SUSE Manager 2.1:perl-Satcon-1.20.2-0.7.6 SUSE Manager 2.1:perl-auditlog-keeper-client-0.2.3+git.1417708457.eabd1a9-0.7.58 SUSE Manager 2.1:postgresql91-pltcl-9.1.15-0.3.1 SUSE Manager 2.1:pxe-default-image-0.1-0.20.56 SUSE Manager 2.1:python-enum34-1.0-0.7.33 SUSE Manager 2.1:python-gzipstream-1.10.2.2-0.7.6 SUSE Manager 2.1:rhn-custom-info-5.4.22.6-0.7.13 SUSE Manager 2.1:rhnlib-2.5.69.6-0.7.6 SUSE Manager 2.1:rhnmd-5.3.18.4-0.7.15 SUSE Manager 2.1:rhnpush-5.5.71.7-0.7.16 SUSE Manager 2.1:sm-ncc-sync-data-2.1.9-0.7.6 SUSE Manager 2.1:smdba-1.5.1-0.7.6 SUSE Manager 2.1:spacecmd-2.1.25.7-0.7.9 SUSE Manager 2.1:spacewalk-admin-2.1.2.4-0.7.6 SUSE Manager 2.1:spacewalk-backend-2.1.55.15-0.7.11 SUSE Manager 2.1:spacewalk-backend-app-2.1.55.15-0.7.11 SUSE Manager 2.1:spacewalk-backend-applet-2.1.55.15-0.7.11 SUSE Manager 2.1:spacewalk-backend-config-files-2.1.55.15-0.7.11 SUSE Manager 2.1:spacewalk-backend-config-files-common-2.1.55.15-0.7.11 SUSE Manager 2.1:spacewalk-backend-config-files-tool-2.1.55.15-0.7.11 SUSE Manager 2.1:spacewalk-backend-iss-2.1.55.15-0.7.11 SUSE Manager 2.1:spacewalk-backend-iss-export-2.1.55.15-0.7.11 SUSE Manager 2.1:spacewalk-backend-libs-2.1.55.15-0.7.11 SUSE Manager 2.1:spacewalk-backend-package-push-server-2.1.55.15-0.7.11 SUSE Manager 2.1:spacewalk-backend-server-2.1.55.15-0.7.11 SUSE Manager 2.1:spacewalk-backend-sql-2.1.55.15-0.7.11 SUSE Manager 2.1:spacewalk-backend-sql-oracle-2.1.55.15-0.7.11 SUSE Manager 2.1:spacewalk-backend-sql-postgresql-2.1.55.15-0.7.11 SUSE Manager 2.1:spacewalk-backend-tools-2.1.55.15-0.7.11 SUSE Manager 2.1:spacewalk-backend-xml-export-libs-2.1.55.15-0.7.11 SUSE Manager 2.1:spacewalk-backend-xmlrpc-2.1.55.15-0.7.11 SUSE Manager 2.1:spacewalk-base-2.1.60.12-0.7.7 SUSE Manager 2.1:spacewalk-base-minimal-2.1.60.12-0.7.7 SUSE Manager 2.1:spacewalk-base-minimal-config-2.1.60.12-0.7.7 SUSE Manager 2.1:spacewalk-branding-2.1.33.10-0.7.16 SUSE Manager 2.1:spacewalk-certs-tools-2.1.6.5-0.7.10 SUSE Manager 2.1:spacewalk-check-2.1.16.6-0.7.9 SUSE Manager 2.1:spacewalk-client-setup-2.1.16.6-0.7.9 SUSE Manager 2.1:spacewalk-client-tools-2.1.16.6-0.7.9 SUSE Manager 2.1:spacewalk-config-2.1.5.4-0.7.15 SUSE Manager 2.1:spacewalk-doc-indexes-2.1.2.3-0.7.26 SUSE Manager 2.1:spacewalk-grail-2.1.60.12-0.7.7 SUSE Manager 2.1:spacewalk-html-2.1.60.12-0.7.7 SUSE Manager 2.1:spacewalk-java-2.1.165.14-0.7.16 SUSE Manager 2.1:spacewalk-java-config-2.1.165.14-0.7.16 SUSE Manager 2.1:spacewalk-java-lib-2.1.165.14-0.7.16 SUSE Manager 2.1:spacewalk-java-oracle-2.1.165.14-0.7.16 SUSE Manager 2.1:spacewalk-java-postgresql-2.1.165.14-0.7.16 SUSE Manager 2.1:spacewalk-pxt-2.1.60.12-0.7.7 SUSE Manager 2.1:spacewalk-reports-2.1.14.8-0.7.10 SUSE Manager 2.1:spacewalk-search-2.1.14.6-0.7.18 SUSE Manager 2.1:spacewalk-setup-2.1.14.9-0.7.6 SUSE Manager 2.1:spacewalk-setup-jabberd-2.1.0.2-0.7.6 SUSE Manager 2.1:spacewalk-sniglets-2.1.60.12-0.7.7 SUSE Manager 2.1:spacewalk-taskomatic-2.1.165.14-0.7.16 SUSE Manager 2.1:spacewalk-utils-2.1.27.12-0.7.25 SUSE Manager 2.1:spacewalksd-5.0.14.6-0.7.15 SUSE Manager 2.1:struts-1.2.9-162.33.22 SUSE Manager 2.1:supportutils-plugin-susemanager-1.0.3-0.5.5 SUSE Manager 2.1:supportutils-plugin-susemanager-client-1.0.4-0.5.5 SUSE Manager 2.1:suseRegisterInfo-2.1.9-0.7.29 SUSE Manager 2.1:susemanager-2.1.17-0.7.11 SUSE Manager 2.1:susemanager-client-config_en-pdf-2.1-0.15.24 SUSE Manager 2.1:susemanager-install_en-pdf-2.1-0.15.24 SUSE Manager 2.1:susemanager-jsp_en-2.1-0.15.23 SUSE Manager 2.1:susemanager-manuals_en-2.1-0.15.24 SUSE Manager 2.1:susemanager-proxy-quick_en-pdf-2.1-0.15.24 SUSE Manager 2.1:susemanager-reference_en-pdf-2.1-0.15.24 SUSE Manager 2.1:susemanager-schema-2.1.50.11-0.7.8 SUSE Manager 2.1:susemanager-sync-data-2.1.5-0.7.6 SUSE Manager 2.1:susemanager-tools-2.1.17-0.7.11 SUSE Manager 2.1:susemanager-user_en-pdf-2.1-0.15.24 SUSE Manager 2.1:tanukiwrapper-3.2.3-0.10.12 SUSE Manager 2.1:yum-3.2.29-0.19.30 SUSE Manager 2.1:yum-common-3.2.29-0.19.30 SUSE Manager 2.1:zypp-plugin-spacewalk-0.9.8-0.15.51 SUSE Manager Proxy 1.7:apache2-mod_wsgi-3.3-5.7.1 SUSE Manager Proxy 2.1:apache2-mod_wsgi-3.3-5.7.1 SUSE OpenStack Cloud 3.0:apache2-mod_wsgi-3.3-5.7.1 SUSE OpenStack Cloud 4:apache2-mod_wsgi-3.3-5.7.1 moderate 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C