CVE-2013-4365
Fixed in a distro release EPSS 14%
Heap-based buffer overflow in the fcgid_header_bucket_read function in fcgid_bucket.c in the mod_fcgid module before 2.3.9 for the Apache HTTP Server allows remote attackers to have an unspecified impact via unknown vectors.
Products: apache mod_fcgid, debian_linux, suse cloud, opensuse, suse linux_enterprise_software_development_kit
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libapache2-mod-fcgid | 1:2.3.9-1 |
| Debian 13 | libapache2-mod-fcgid | 1:2.3.9-1 |
| Debian 14 | libapache2-mod-fcgid | 1:2.3.9-1 |
| Debian 6.0 | libapache2-mod-fcgid | 1:2.3.6-1+squeeze2 |
| Debian 7 | libapache2-mod-fcgid | 1:2.3.6-1.2+deb7u1 |
| openSUSE Tumbleweed | apache2-mod_fcgid | 2.3.9-7.3 |