Logo
componentfcgi
Name
fcgi
Version
2.4.2
Type
library
Description
-
Licenses
OML
PURL
-
CPE
cpe:2.3:*:fastcgi:fcgi:2.4.2:*:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
kirkstone
2.4.2
master
2.4.7

Patches#


#
Title
Author
Resolve
1
Fix size_t overflow in Malloc() argument in ReadParams()
=?UTF-8?q?Petr=20P=C3=ADsa=C5=99?= <ppisar@redhat.com>
CVE-2025-23016
2
Update fcgiapp.c
Pycatchown <39068868+Pycatchown@users.noreply.github.com>
CVE-2025-23016

Vulnerabilities#


Name
Analysis
Description
Patched
FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.