debian/libfcgi-perl vulnerabilities

Latest debian/libfcgi-perl CVEs

Newest publication first

1. CVE-2025-40907 FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library

   Published 2025-05-16

   Medium·CVSS 5.3 EPSS 0.68%

   FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library. The included FastCGI library is affected by CVE-2025-23016, causing an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen valu...

2. DLA-431-1 libfcgi-perl - security update

   Published 2016-02-25

   Unknown

3. CVE-2012-6687 FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service (segmentation fault and crash) via a large number of connections.

   Published 2015-02-19

   Medium·CVSS 5.0 EPSS 6.1%

   FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service (segmentation fault and crash) via a large number of connections.

4. DSA-2327-1 libfcgi-perl - authentication bypass

   Published 2011-10-24

   Unknown

5. CVE-2011-2766 The FCGI (aka Fast CGI) module 0.70 through 0.73 for Perl, as used by CGI::Fast, uses environment variable values from one request during processing of a later request, which allows remote attackers t...

   Published 2011-09-23

   High·CVSS 7.5 EPSS 7.2%

   The FCGI (aka Fast CGI) module 0.70 through 0.73 for Perl, as used by CGI::Fast, uses environment variable values from one request during processing of a later request, which allows remote attackers to bypass authentication via crafted HTTP headers.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.