fcgi vulnerabilities

1 known vulnerability in fcgi from FastCGI. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  fcgi: Integer Overflow or Wraparound

  CVE-2025-23016Jan 10, 2025FastCGI

  FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.