description: mod_wsgi module before 3.4 for Apache, when used in embedded mode, might allow remote attackers to obtain sensitive information via the Content-Type header which is generated from memory that may have been freed and then overwritten by a separate thread.
problem types: General Race Condition
affected:
{
product: mod_wsgi
vendor: mod_wsgi
versions:
status: affected, version: before 3.4
}