Skip to content
OpenAdvisories
Medium USN-7527-1 1 CVE

libfcgi-perl vulnerability

Published May 22, 2025 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that libfcgi-perl incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a crash or execute
arbitrary code.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS libfcgi-perl 0.79-1ubuntu0.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS libfcgi-perl 0.77-1ubuntu0.1~esm1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS libfcgi-perl 0.78-2ubuntu0.1~esm1

Vulnerabilities 1

  • Medium 5.3
    CVE-2025-40907

    FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library

    FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library. The included FastCGI library is affected by CVE-2025-23016, causing an integer overflow (and resultant heap-based buffer overflow) via crafted nam…

    ether FCGI libfcgi-perl perl-FCGI Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2025-40907