Summary
It was discovered that FastCGI incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a crash or
execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | libfcgi | 2.4.2-2ubuntu0.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | libfcgi | 2.4.2-2.1ubuntu0.24.04.1 |
Vulnerabilities 1
-
Critical 9.3
FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via craft…
References
-
report
https://ubuntu.com/security/CVE-2025-23016