CVE catalog

CVE-2020-11984

uwsgi: CVE-2020-11984

[CVE catalog]

Severity
Critical · CVSS 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
90.04% · Oct 22, 2026

Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianuwsgisid2.0.31-6vulnerable
Debianuwsgiforky2.0.31-6vulnerable
Debianuwsgitrixie2.0.28-9vulnerable
Debianuwsgibookworm2.0.21-5.1vulnerable
Debianapache2sid2.4.69-1fixed
Debianapache2forky2.4.69-1fixed
Debianapache2trixie2.4.68-1~deb13u1fixed
Debianapache2trixie-security2.4.69-1~deb13u1fixed
Debianapache2bookworm2.4.68-1~deb12u1fixed
Debianapache2bookworm-security2.4.67-1~deb12u3fixed
Alpineapache23.102.4.46-r0fixed
Alpineapache23.112.4.46-r0fixed
Alpineapache23.122.4.46-r0fixed
Alpineapache23.132.4.46-r0fixed
Alpineapache23.142.4.46-r0fixed
Alpineapache23.152.4.46-r0fixed
Alpineapache23.162.4.46-r0fixed
Alpineapache23.172.4.46-r0fixed
Alpineapache23.182.4.46-r0fixed
Alpineapache23.192.4.46-r0fixed
Alpineapache23.202.4.46-r0fixed
Alpineapache23.212.4.46-r0fixed
Alpineapache23.222.4.46-r0fixed
Alpineapache23.232.4.46-r0fixed
Alpineapache23.242.4.46-r0fixed
Alpineapache23.92.4.46-r0fixed
Ubuntuuwsgipro2.0.7-1ubuntu5vulnerable
Ubuntuuwsgipro2.0.7-1ubuntu6vulnerable
Ubuntuuwsgipro2.0.11.2-6ubuntu1vulnerable
Ubuntuuwsgipro2.0.11.2-6ubuntu2vulnerable
Ubuntuuwsgipro2.0.12-4ubuntu2vulnerable
Ubuntuuwsgipro2.0.12-5ubuntu1vulnerable
Ubuntuuwsgipro2.0.12-5ubuntu2vulnerable
Ubuntuuwsgipro2.0.12-5ubuntu3vulnerable
Ubuntuuwsgipro2.0.12-5ubuntu3.1vulnerable
Ubuntuuwsgipro2.0.12-5ubuntu3.2vulnerable
Ubuntuuwsgipro2.0.12-5ubuntu3.2+esm1fixed
Ubuntuapache216.042.4.12-2ubuntu2vulnerable
Ubuntuapache216.042.4.17-1ubuntu1vulnerable
Ubuntuapache216.042.4.17-2ubuntu1vulnerable
Ubuntuapache216.042.4.17-3ubuntu1vulnerable
Ubuntuapache216.042.4.18-1ubuntu1vulnerable
Ubuntuapache216.042.4.18-2ubuntu1vulnerable
Ubuntuapache216.042.4.18-2ubuntu2vulnerable
Ubuntuapache216.042.4.18-2ubuntu3vulnerable
Ubuntuapache216.042.4.18-2ubuntu3.1vulnerable
Ubuntuapache216.042.4.18-2ubuntu3.2vulnerable
Ubuntuapache216.042.4.18-2ubuntu3.3vulnerable
Ubuntuapache216.042.4.18-2ubuntu3.4vulnerable
Ubuntuapache216.042.4.18-2ubuntu3.5vulnerable
Ubuntuapache216.042.4.18-2ubuntu3.7vulnerable
Ubuntuapache216.042.4.18-2ubuntu3.8vulnerable
Ubuntuapache216.042.4.18-2ubuntu3.9vulnerable
Ubuntuapache216.042.4.18-2ubuntu3.10vulnerable
Ubuntuapache216.042.4.18-2ubuntu3.12vulnerable
Ubuntuapache216.042.4.18-2ubuntu3.13vulnerable
Ubuntuapache216.042.4.18-2ubuntu3.14vulnerable
Ubuntuapache216.042.4.18-2ubuntu3.15vulnerable
Ubuntuapache216.042.4.18-2ubuntu3.17fixed
Ubuntuapache218.042.4.27-2ubuntu3vulnerable
Ubuntuapache218.042.4.29-1ubuntu1vulnerable
Ubuntuapache218.042.4.29-1ubuntu2vulnerable
Ubuntuapache218.042.4.29-1ubuntu3vulnerable
Ubuntuapache218.042.4.29-1ubuntu4vulnerable
Ubuntuapache218.042.4.29-1ubuntu4.1vulnerable
Ubuntuapache218.042.4.29-1ubuntu4.2vulnerable
Ubuntuapache218.042.4.29-1ubuntu4.3vulnerable
Ubuntuapache218.042.4.29-1ubuntu4.4vulnerable
Ubuntuapache218.042.4.29-1ubuntu4.5vulnerable
Ubuntuapache218.042.4.29-1ubuntu4.6vulnerable
Ubuntuapache218.042.4.29-1ubuntu4.7vulnerable
Ubuntuapache218.042.4.29-1ubuntu4.8vulnerable
Ubuntuapache218.042.4.29-1ubuntu4.10vulnerable
Ubuntuapache218.042.4.29-1ubuntu4.11vulnerable
Ubuntuapache218.042.4.29-1ubuntu4.12vulnerable
Ubuntuapache218.042.4.29-1ubuntu4.13vulnerable
Ubuntuapache218.042.4.29-1ubuntu4.14fixed
Ubuntuapache220.042.4.41-1ubuntu1vulnerable
Ubuntuapache220.042.4.41-4ubuntu1vulnerable
Ubuntuapache220.042.4.41-4ubuntu2vulnerable
Ubuntuapache220.042.4.41-4ubuntu3vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.1fixed
Ubuntuuwsgipro2.0.7-1ubuntu5vulnerable
Ubuntuuwsgipro2.0.7-1ubuntu6vulnerable
Ubuntuuwsgipro2.0.11.2-6ubuntu1vulnerable
Ubuntuuwsgipro2.0.11.2-6ubuntu2vulnerable
Ubuntuuwsgipro2.0.12-4ubuntu2vulnerable
Ubuntuuwsgipro2.0.12-5ubuntu1vulnerable
Ubuntuuwsgipro2.0.12-5ubuntu2vulnerable
Ubuntuuwsgipro2.0.12-5ubuntu3vulnerable
Ubuntuuwsgipro2.0.12-5ubuntu3.1vulnerable
Ubuntuuwsgipro2.0.12-5ubuntu3.2vulnerable
Ubuntuuwsgipro2.0.12-5ubuntu3.2+esm1fixed
Ubuntuuwsgi18.042.0.15-2.1ubuntu2vulnerable
Ubuntuuwsgi18.042.0.15-2.1ubuntu3vulnerable
Ubuntuuwsgi18.042.0.15-10vulnerable
Ubuntuuwsgi18.042.0.15-10.1vulnerable
Ubuntuuwsgi18.042.0.15-10.1build1vulnerable
Ubuntuuwsgi18.042.0.15-10.1build2vulnerable
Ubuntuuwsgi18.042.0.15-10.2vulnerable
Ubuntuuwsgi18.042.0.15-10.2ubuntu2vulnerable
Ubuntuuwsgi18.042.0.15-10.2ubuntu2.1vulnerable
Ubuntuuwsgi18.042.0.15-10.2ubuntu2.2fixed
Ubuntuapache220.042.4.41-1ubuntu1vulnerable
Ubuntuapache220.042.4.41-4ubuntu1vulnerable
Ubuntuapache220.042.4.41-4ubuntu2vulnerable
Ubuntuapache220.042.4.41-4ubuntu3vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.1fixed
Ubuntuuwsgi18.042.0.15-2.1ubuntu2vulnerable
Ubuntuuwsgi18.042.0.15-2.1ubuntu3vulnerable
Ubuntuuwsgi18.042.0.15-10vulnerable
Ubuntuuwsgi18.042.0.15-10.1vulnerable
Ubuntuuwsgi18.042.0.15-10.1build1vulnerable
Ubuntuuwsgi18.042.0.15-10.1build2vulnerable
Ubuntuuwsgi18.042.0.15-10.2vulnerable
Ubuntuuwsgi18.042.0.15-10.2ubuntu2vulnerable
Ubuntuuwsgi18.042.0.15-10.2ubuntu2.1vulnerable
Ubuntuuwsgi18.042.0.15-10.2ubuntu2.2fixed
Suseapache2linux enterprise module for basesystem 15 sp22.4.43-3.5.1fixed
Suseapache2linux enterprise module for server applications 15 sp22.4.43-3.5.1fixed
Opensuseapache2leap 15.22.4.43-lp152.2.3.1fixed
Suseapache2linux enterprise module for server applications 15 sp12.4.33-3.33.1fixed
Suseapache2linux enterprise high performance computing 15-espos2.4.33-3.33.1fixed
Suseapache2linux enterprise high performance computing 15-ltss2.4.33-3.33.1fixed
Suseapache2linux enterprise server 15-ltss2.4.33-3.33.1fixed
Suseapache2linux enterprise server for sap applications 152.4.33-3.33.1fixed
Opensuseapache2leap 15.12.4.33-lp151.8.15.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianuwsgisourcesid(unfixed)unimportantNot reportedNot reported
Debianuwsgisourceforky(unfixed)unimportantNot reportedNot reported
Debianuwsgisourcetrixie(unfixed)unimportantNot reportedNot reported
Debianuwsgisourcebookworm(unfixed)unimportantNot reportedNot reported
Debianapache2sourcesid2.4.46-1not yet assignedNot reportedNot reported
Debianapache2sourceforky2.4.46-1not yet assignedNot reportedNot reported
Debianapache2sourcetrixie2.4.46-1not yet assignedNot reportedNot reported
Debianapache2sourcebookworm2.4.46-1not yet assignedNot reportedNot reported
Alpineapache2apk3.102.4.46-r0Not reportedALPINE-CVE-2020-11984Not reported
Alpineapache2apk3.112.4.46-r0Not reportedALPINE-CVE-2020-11984Not reported
Alpineapache2apk3.122.4.46-r0Not reportedALPINE-CVE-2020-11984Not reported
Alpineapache2apk3.132.4.46-r0Not reportedALPINE-CVE-2020-11984Not reported
Alpineapache2apk3.142.4.46-r0Not reportedALPINE-CVE-2020-11984Not reported
Alpineapache2apk3.152.4.46-r0Not reportedALPINE-CVE-2020-11984Not reported
Alpineapache2apk3.162.4.46-r0Not reportedALPINE-CVE-2020-11984Not reported
Alpineapache2apk3.172.4.46-r0Not reportedALPINE-CVE-2020-11984Not reported
Alpineapache2apk3.182.4.46-r0Not reportedALPINE-CVE-2020-11984Not reported
Alpineapache2apk3.192.4.46-r0Not reportedALPINE-CVE-2020-11984Not reported
Alpineapache2apk3.202.4.46-r0Not reportedALPINE-CVE-2020-11984Not reported
Alpineapache2apk3.212.4.46-r0Not reportedALPINE-CVE-2020-11984Not reported
Alpineapache2apk3.222.4.46-r0Not reportedALPINE-CVE-2020-11984Not reported
Alpineapache2apk3.232.4.46-r0Not reportedALPINE-CVE-2020-11984Not reported
Alpineapache2apk3.242.4.46-r0Not reportedALPINE-CVE-2020-11984Not reported
Alpineapache2apk3.92.4.46-r0Not reportedALPINE-CVE-2020-11984Not reported
Ubuntuuwsgidebpro2.0.12-5ubuntu3.2+esm1Not reportedUSN-5054-2Not reported
Ubuntuapache2deb16.042.4.18-2ubuntu3.17Not reportedUSN-4458-1Not reported
Ubuntuapache2deb18.042.4.29-1ubuntu4.14Not reportedUSN-4458-1Not reported
Ubuntuapache2deb20.042.4.41-4ubuntu3.1Not reportedUSN-4458-1Not reported
Ubuntuuwsgidebpro2.0.12-5ubuntu3.2+esm1Not reportedUBUNTU-CVE-2020-11984Not reported
Ubuntuuwsgideb18.042.0.15-10.2ubuntu2.2Not reportedUBUNTU-CVE-2020-11984Not reported
Ubuntuapache2deb20.042.4.41-4ubuntu3.1Not reportedUBUNTU-CVE-2020-11984Not reported
Ubuntuuwsgideb18.042.0.15-10.2ubuntu2.2Not reportedUSN-5054-1Not reported
Suseapache2rpmlinux enterprise module for basesystem 15 sp22.4.43-3.5.1Not reportedSUSE-SU-2020:2311-1Not reported
Suseapache2rpmlinux enterprise module for server applications 15 sp22.4.43-3.5.1Not reportedSUSE-SU-2020:2311-1Not reported
Opensuseapache2rpmleap 15.22.4.43-lp152.2.3.1Not reportedOPENSUSE-SU-2020:1285-1Not reported
Suseapache2rpmlinux enterprise module for server applications 15 sp12.4.33-3.33.1Not reportedSUSE-SU-2020:2344-1Not reported
Suseapache2rpmlinux enterprise high performance computing 15-espos2.4.33-3.33.1Not reportedSUSE-SU-2020:2344-1Not reported
Suseapache2rpmlinux enterprise high performance computing 15-ltss2.4.33-3.33.1Not reportedSUSE-SU-2020:2344-1Not reported
Suseapache2rpmlinux enterprise server 15-ltss2.4.33-3.33.1Not reportedSUSE-SU-2020:2344-1Not reported
Suseapache2rpmlinux enterprise server for sap applications 152.4.33-3.33.1Not reportedSUSE-SU-2020:2344-1Not reported
Opensuseapache2rpmleap 15.12.4.33-lp151.8.15.1Not reportedOPENSUSE-SU-2020:1293-1Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • Source package: [uwsgi]

    Details (2)
    • 2.0.21-5.1 · amd64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

    • 2.0.21-5.1 · arm64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

  • Source package: [uwsgi]

    Details (2)
    • 2.0.21-5.1 · amd64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

    • 2.0.21-5.1 · arm64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

  • Source package: [uwsgi]

    Details (2)
    • 2.0.21-5.1 · amd64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

    • 2.0.21-5.1 · arm64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

  • Source package: [uwsgi]

    Details (2)
    • 2.0.21-5.1 · amd64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

    • 2.0.21-5.1 · arm64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

  • Source package: [uwsgi]

    Details (2)
    • 2.0.21-5.1 · all · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

    • 2.0.21-5.1 · all · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

  • [uwsgi]Affected
    Details (2)
    • 2.0.21-5.1 · amd64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

    • 2.0.21-5.1 · arm64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

  • Source package: [uwsgi]

    Details (2)
    • 2.0.21-5.1 · amd64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

    • 2.0.21-5.1 · arm64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

  • [uwsgi-core]Affected

    Source package: [uwsgi]

    Details (2)
    • 2.0.21-5.1 · amd64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

    • 2.0.21-5.1 · arm64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

  • [uwsgi-dbg]Affected

    Source package: [uwsgi]

    Details (2)
    • 2.0.21-5.1 · amd64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

    • 2.0.21-5.1 · arm64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

  • [uwsgi-dev]Affected

    Source package: [uwsgi]

    Details (2)
    • 2.0.21-5.1 · amd64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

    • 2.0.21-5.1 · arm64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

  • [uwsgi-emperor]Affected

    Source package: [uwsgi]

    Details (2)
    • 2.0.21-5.1 · amd64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

    • 2.0.21-5.1 · arm64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

  • [uwsgi-extra]Affected

    Source package: [uwsgi]

    Details (2)
    • 2.0.21-5.1 · all · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

    • 2.0.21-5.1 · all · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

  • Source package: [uwsgi]

    Details (2)
    • 2.0.21-5.1 · amd64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

    • 2.0.21-5.1 · arm64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

  • Source package: [uwsgi]

    Details (2)
    • 2.0.21-5.1 · amd64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

    • 2.0.21-5.1 · arm64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

  • Source package: [uwsgi]

    Details (2)
    • 2.0.21-5.1 · amd64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

    • 2.0.21-5.1 · arm64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

  • Source package: [uwsgi]

    Details (2)
    • 2.0.21-5.1 · amd64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

    • 2.0.21-5.1 · arm64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

  • Source package: [uwsgi]

    Details (2)
    • 2.0.21-5.1 · amd64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

    • 2.0.21-5.1 · arm64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

  • Source package: [uwsgi]

    Details (2)
    • 2.0.21-5.1 · amd64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

    • 2.0.21-5.1 · arm64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

  • Source package: [uwsgi]

    Details (2)
    • 2.0.21-5.1 · amd64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

    • 2.0.21-5.1 · arm64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

  • Source package: [uwsgi]

    Details (2)
    • 2.0.21-5.1 · amd64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

    • 2.0.21-5.1 · arm64 · bookworm

      Affected

      dsa · uwsgi · debian · bookworm; dsa · uwsgi · debian · 12

Next results

Observed:

References