CVE-2012-6687 FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service (segmentation fault and crash) via a large number of connections.
MediumCVSS 5.0
EPSS 6.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service (segmentation fault and crash) via a large number of connections.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libfcgi(Debian:12) | < 2.4.0-8.3 | 2.4.0-8.3 |
| debian/libfcgi(Debian:13) | < 2.4.0-8.3 | 2.4.0-8.3 |
| debian/libfcgi(Debian:14) | < 2.4.0-8.3 | 2.4.0-8.3 |
| debian/libfcgi-perl(Debian:12) | < 0.78-2 | 0.78-2 |
| debian/libfcgi-perl(Debian:13) | < 0.78-2 | 0.78-2 |
| debian/libfcgi-perl(Debian:14) | < 0.78-2 | 0.78-2 |
| fastcgi fcgi | = 2.4.0 | No fix listed |
References
- Debian Security Tracker CVE-2012-6687 vendor-advisory
- advisories.mageia.org
- [oss-security] 20150206 CVE request for denial-of-service vulnerability in fcgi mailing-list
- [oss-security] 20150207 Re: CVE request for denial-of-service vulnerability in fcgi mailing-list
- bugs.debian.org
- bugs.launchpad.net
- bugzilla.redhat.com
- libfcgi-connections-dos(100696) vdb-entry
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking