CVE-2010-3872
Fixed in a distro release EPSS 3%CVSS 7.5
A flaw was found in the mod_fcgid module of httpd. A malformed FastCGI response may result in a stack-based buffer overflow in the modules/fcgid/fcgid_bucket.c file in the fcgid_header_bucket_read() function, resulting in an application crash.
Products: Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libapache2-mod-fcgid | 1:2.3.6-1 |
| Debian 13 | libapache2-mod-fcgid | 1:2.3.6-1 |
| Debian 14 | libapache2-mod-fcgid | 1:2.3.6-1 |
| Debian 5.0 | libapache2-mod-fcgid | 1:2.2-1+lenny1 |
| openSUSE Tumbleweed | apache2-mod_fcgid | 2.3.9-7.3 |