FastCGI vulnerabilities
We track 1 vulnerability in FastCGI products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 10, 2025.
1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score
Latest FastCGI vulnerabilities
- 9.3 Critical severity
fcgi: Integer Overflow or Wraparound
FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.