Lucene search
+L

66 matches found

RedHat Linux
RedHat Linux
•added 2025/06/11 10:24 a.m.•16 views

perl-fcgi: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library

A flaw was found in the FCGI library. In affected versions, specially crafted nameLen or valueLen values in data sent to the IPC socket may result in a heap-based buffer overflow, which can cause an application crash or other undefined behavior. This occurs in ReadParams in fcgiapp.c...

5.3CVSS5.9AI score0.00648EPSS
SaveExploits1References10
RedHat Linux
RedHat Linux
•added 2025/06/09 5:13 p.m.•16 views

perl-fcgi: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library

A flaw was found in the FCGI library. In affected versions, specially crafted nameLen or valueLen values in data sent to the IPC socket may result in a heap-based buffer overflow, which can cause an application crash or other undefined behavior. This occurs in ReadParams in fcgiapp.c...

5.3CVSS5.9AI score0.00648EPSS
SaveExploits1References10
RedHat Linux
RedHat Linux
•added 2025/06/09 3:24 p.m.•17 views

perl-fcgi: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library

A flaw was found in the FCGI library. In affected versions, specially crafted nameLen or valueLen values in data sent to the IPC socket may result in a heap-based buffer overflow, which can cause an application crash or other undefined behavior. This occurs in ReadParams in fcgiapp.c...

5.3CVSS5.9AI score0.00648EPSS
SaveExploits1References10
RedHat Linux
RedHat Linux
•added 2025/06/09 2:03 p.m.•14 views

perl-fcgi: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library

A flaw was found in the FCGI library. In affected versions, specially crafted nameLen or valueLen values in data sent to the IPC socket may result in a heap-based buffer overflow, which can cause an application crash or other undefined behavior. This occurs in ReadParams in fcgiapp.c...

5.3CVSS5.9AI score0.00648EPSS
SaveExploits1References10
RedHat Linux
RedHat Linux
•added 2025/06/09 3:25 a.m.•22 views

perl-fcgi: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library

A flaw was found in the FCGI library. In affected versions, specially crafted nameLen or valueLen values in data sent to the IPC socket may result in a heap-based buffer overflow, which can cause an application crash or other undefined behavior. This occurs in ReadParams in fcgiapp.c...

5.3CVSS5.9AI score0.00648EPSS
SaveExploits1References10
RedhatCVE
RedhatCVE
•added 2025/05/22 12:57 a.m.•18 views

CVE-2016-11039

An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, and M6.0 AP + CP MDM9x35, or Qualcomm Onechip software. There is a NULL pointer dereference issue in the IPC socket code. The Samsung ID is SVE-2016-5980 July 2016...

7.8CVSS7.1AI score0.00513EPSS
SaveExploits0References1
OSV
OSV
•added 2025/05/16 1:15 p.m.•15 views

AZL-61905 CVE-2025-40907 affecting package perl-FCGI 0.79-4

FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 aka fcgi library. The included FastCGI library is affected by CVE-2025-23016, causing an integer overflow and resultant heap-based buffer overflow via crafted nameLen or valueLen values in data to the IPC...

5.3CVSS6AI score0.00648EPSS
SaveExploits1References1
OSV
OSV
•added 2025/05/16 1:03 p.m.•19 views

CVE-2025-40907 FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library

FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 aka fcgi library. The included FastCGI library is affected by CVE-2025-23016, causing an integer overflow and resultant heap-based buffer overflow via crafted nameLen or valueLen values in data to the IPC...

5.3CVSS7.1AI score
SaveExploits0References10
CVE
CVE
•added 2025/05/16 1:03 p.m.•108 views

CVE-2025-40907

The FCGI for Perl (versions 0.44 through 0.82) is affected by CVE-2025-40907 due to the inclusion of a vulnerable version of the FastCGI fcgi2 (aka fcgi ) library. The underlying cause is an integer overflow that leads to a heap-based buffer overflow when processing crafted nameLen or valueLen va...

5.3CVSS6.9AI score0.00648EPSS
SaveExploits1References6Affected Software1
AlpineLinux
AlpineLinux
•added 2025/05/16 1:03 p.m.•10 views

CVE-2025-40907

FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 aka fcgi library. The included FastCGI library is affected by CVE-2025-23016, causing an integer overflow and resultant heap-based buffer overflow via crafted nameLen or valueLen values in data to the IPC...

9.3CVSS7.6AI score0.00648EPSS
SaveExploits1References6
Debian CVE
Debian CVE
•added 2025/05/16 1:03 p.m.•27 views

CVE-2025-40907

FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 aka fcgi library. The included FastCGI library is affected by CVE-2025-23016, causing an integer overflow and resultant heap-based buffer overflow via crafted nameLen or valueLen values in data to the IPC...

5.3CVSS6.3AI score0.00648EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2025/05/06 12:00 a.m.•24 views

Azure Linux 3.0 Security Update: fcgi (CVE-2025-23016)

The version of fcgi installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-23016 advisory. - FastCGI fcgi2 aka fcgi 2.x through 2.4.4 has an integer overflow and resultant heap-based buffer overflow via...

9.3CVSS8.1AI score0.00612EPSS
SaveExploits0References2
OSV
OSV
•added 2025/05/05 4:57 a.m.•10 views

MGASA-2025-0144 Updated fcgi packages fix security vulnerability

FastCGI fcgi2 aka fcgi 2.x through 2.4.4 has an integer overflow and resultant heap-based buffer overflow via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c. CVE-2025-23016...

9.3CVSS9.7AI score0.00612EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/05/05 12:00 a.m.•7 views

FreeBSD : fcgi -- Heap-based buffer overflow via crafted nameLen/valueLen in ReadParams (5f868a5f-2943-11f0-bb22-f02f7432cf97)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5f868a5f-2943-11f0-bb22-f02f7432cf97 advisory. [email protected] reports: FastCGI fcgi2 aka fcgi 2.x through 2.4.4 has an integer overflow and resultant...

9.3CVSS8.3AI score0.00612EPSS
SaveExploits0References4
NVD
NVD
•added 2025/01/10 12:15 p.m.•25 views

CVE-2025-23016

FastCGI fcgi2 aka fcgi 2.x through 2.4.4 has an integer overflow and resultant heap-based buffer overflow via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c...

9.3CVSS0.00612EPSS
SaveExploits0References5
OSV
OSV
•added 2025/01/10 12:15 p.m.•13 views

AZL-55443 CVE-2025-23016 affecting package fcgi for versions less than 2.4.5-1

FastCGI fcgi2 aka fcgi 2.x through 2.4.4 has an integer overflow and resultant heap-based buffer overflow via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c...

9.3CVSS7.4AI score0.00612EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/10 12:15 p.m.•7 views

DEBIAN-CVE-2025-23016

FastCGI fcgi2 aka fcgi 2.x through 2.4.4 has an integer overflow and resultant heap-based buffer overflow via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c...

9.3CVSS8.3AI score0.00612EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2025/01/10 12:00 a.m.•28 views

CVE-2025-23016

FastCGI fcgi2 aka fcgi 2.x through 2.4.4 has an integer overflow and resultant heap-based buffer overflow via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c...

9.3CVSS8.3AI score0.00612EPSS
SaveExploits0
CVE
CVE
•added 2025/01/10 12:00 a.m.•409 views

CVE-2025-23016

CVE-2025-23016 affects FastCGI fcgi2 (fcgi) 2.x up to 2.4.4, with an integer overflow (leading to a heap-based buffer overflow) in ReadParams in fcgiapp.c when handling crafted nameLen/valueLen on IPC socket data. Connected documents confirm this issue across multiple distributions and note a fix...

9.3CVSS9.4AI score0.00612EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/01/10 12:00 a.m.•11 views

fcgi2 安全漏洞

fcgi2 is a FastCGI developer's toolkit from FastCGI-Archives open source. A security vulnerability exists in fcgi2 versions 2.x through 2.4.4, which stems from the presence of an integer overflow that allows an attacker to send data to an IPC socket with a carefully crafted nameLen or valueLen...

9.3CVSS8.3AI score0.00612EPSS
SaveExploits0References2
Rows per page
Query Builder