CVE-2025-40907
FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library
Résumé
FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library
Description d'origine
La description telle que publiée par la source (souvent en anglais).
FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library.
The included FastCGI library is affected by CVE-2025-23016, causing an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2025-40907 libfcgi-perl Corrigé dans: 0.79+ds-2
Références
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com
- patch patch-diff.githubusercontent.com
- report github.com
- report github.com
- web cpan.org
- web openwall.com
- web synacktiv.com