The vulnerability in the ReadParams function of the fcgiapp.c file, part of the FastCGI protocol implementation for the fcgii2 library (fcgi), allows a hacker to execute arbitrary code.

The vulnerability of the ReadParams function in the fcgiapp.c file of the FastCGI protocol implementation, within the fcgii2 fcgi library, is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending requests containing...

CVE-2025-23016

CVE-2025-23016 affects FastCGI fcgi2 (fcgi) 2.x up to 2.4.4, with an integer overflow (leading to a heap-based buffer overflow) in ReadParams in fcgiapp.c when handling crafted nameLen/valueLen on IPC socket data. Connected documents confirm this issue across multiple distributions and note a fix...

PT-2025-21645

Name of the Vulnerable Software and Affected Versions: FCGI versions 0.44 through 0.82 Description: The included FastCGI library in FCGI is affected, causing an integer overflow and resultant heap-based buffer overflow via crafted nameLen or valueLen values in data to the IPC socket. This occurs ...