The uwsgi_expand_path function in core/utils.c in Unbit uWSGI through 2.0.15 has a stack-based buffer overflow via a large directory length.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The uwsgi_expand_path function in core/utils.c in Unbit uWSGI through 2.0.15 has a stack-based buffer
    overflow via a large directory length. (CVE-2018-6758)

- Conditionally disable router-access for tcp_wrappers     deprecation (Jorge Gallegos)

  - Updated to 2.0.16 which includes fix for CVE-2018-6758     (Jorge Gallegos)

---

  - Modernize and generalize building of Python subpackages :

  - replace python with python2

  - use appropriate macros for when refering to Python 3

  - prefix Python-dependent plugins with the version of     Python they are built with

  - Also build Python 3 subpackages for the other Python 3     version in EPEL7

---

  - Build Python 3 version(s) of gevent plugin on Fedora and     EPEL7

  - Build Python 3 version of greenlet plugin on Fedora and     EPEL7

  - Build Python 2 version of greenlet plugin on EPEL7

  - Always build Python 3 version of tornado plugin when     building with Python 3 (drop python3_tornado build     conditional)

---

  - Latest upstream (rhbz#1549354)

  - Enable uwsgi-plugin-coroae on EL7

  - Use systemd tmpfiles to create /run/uwsgi with group     write permissions (rhbz#1427303)

  - Use /var/run/uwsgi when not using systemd

  - Build with versioned python command

  - Remove %%config from systemd unit file

  - Disable greenlet plugin on EL7

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Uwsgi developers report :

It was discovered that the uwsgi_expand_path function in utils.c in Unbit uWSGI, an application container server, has a stack-based buffer overflow via a large directory length that can cause a denial-of-service (application crash) or stack corruption.

It was discovered that the uwsgi_expand_path function in utils.c in Unbit uWSGI, an application container server, has a stack-based buffer overflow via a large directory length that can cause a denial of service (application crash) or stack corruption.

For Debian 7 'Wheezy', these problems have been fixed in version 1.2.3+dfsg-5+deb7u2.

We recommend that you upgrade your uwsgi packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
424580	Alpine: multiple uwsgi packages: security update to 2.0.16-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
424580	Alpine: multiple uwsgi packages: security update to 2.0.16-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
400748	Alpine: multiple uwsgi packages: security update to 2.0.15-r4 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
400748	Alpine: multiple uwsgi packages: security update to 2.0.15-r4 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
111235	Fedora 27 : uwsgi (2018-04b3af1edf)	Nessus	Fedora Local Security Checks	critical
106813	FreeBSD : uwsgi -- a stack-based buffer overflow (a8f25565-109e-11e8-8d41-97657151f8c2)	Nessus	FreeBSD Local Security Checks	critical
106723	Debian DLA-1275-1 : uwsgi security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2018-6758

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical