Description
FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| FastCGI | fcgi | 2.0.0 – ≤ 2.4.4 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | libfcgi | 2.4.5-0.1 | — |
| Debian 13 | libfcgi | 2.4.5-0.1 | — |
| Debian 12 | libfcgi | 2.4.2-2+deb12u1 | — |
| Debian 11 | libfcgi | 2.4.2-2+deb11u1 | DLA-4329-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 25.10 | libfcgi | 2.4.5-0.1 | — |
| Ubuntu 24.04 LTS | libfcgi | 2.4.2-2.1ubuntu0.24.04.1 | USN-7486-1 |
| Ubuntu 22.04 LTS | libfcgi | 2.4.2-2ubuntu0.1 | USN-7486-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | libfcgi | 2.4.0-10ubuntu0.20.04.1~esm1 | USN-9051-1 |
| Ubuntu Pro 18.04 LTS | libfcgi | 2.4.0-10ubuntu0.18.04.1~esm1 | USN-9051-1 |
| Ubuntu Pro 16.04 LTS | libfcgi | 2.4.0-8.3ubuntu0.1~esm1 | USN-9051-1 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | FastCGI | 2.4.0-150000.4.3.1 | SUSE-SU-2025:02372-1 |
| SLES 15 SP6 | FastCGI | 2.4.0-150000.4.3.1 | SUSE-SU-2025:02372-1 |
| SLES 15 SP5 | FastCGI | 2.4.0-150000.4.3.1 | SUSE-SU-2025:02372-1 |
| SLES 15 SP4 | FastCGI | 2.4.0-150000.4.3.1 | SUSE-SU-2025:02372-1 |
| SLES 15 SP3 | FastCGI | 2.4.0-150000.4.3.1 | SUSE-SU-2025:02372-1 |
Show 8 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | FastCGI | 2.4.0-169.3.1 | SUSE-SU-2025:02369-1 |
| SLES for SAP 15 SP5 | FastCGI | 2.4.0-150000.4.3.1 | SUSE-SU-2025:02372-1 |
| SLES for SAP 15 SP4 | FastCGI | 2.4.0-150000.4.3.1 | SUSE-SU-2025:02372-1 |
| SLES for SAP 15 SP3 | FastCGI | 2.4.0-150000.4.3.1 | SUSE-SU-2025:02372-1 |
| SLE HPC 15 SP5 | FastCGI | 2.4.0-150000.4.3.1 | SUSE-SU-2025:02372-1 |
| SLE HPC 15 SP4 | FastCGI | 2.4.0-150000.4.3.1 | SUSE-SU-2025:02372-1 |
| SLE HPC 15 SP3 | FastCGI | 2.4.0-150000.4.3.1 | SUSE-SU-2025:02372-1 |
| SUSE Enterprise Storage 7.1 | FastCGI | 2.4.0-150000.4.3.1 | SUSE-SU-2025:02372-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | FastCGI | 2.4.6-1.1 | openSUSE-SU-2025:15348-1 |
| openSUSE Leap 15.6 | FastCGI | 2.4.0-150000.4.3.1 | SUSE-SU-2025:02372-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | fcgi | 2.4.5-1 | — |
| Azure Linux 2 (CBL-Mariner) | fcgi | 2.4.5-1 | — |
Advisories 8
- USN-9051-1 libfcgi vulnerability Ubuntu Security Notices (USN) · Nov 12, 2026
- WID-SEC-2025-1559 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
- USN-7486-1 libfcgi vulnerability Ubuntu Security Notices (USN) · Apr 27, 2026
- openSUSE-SU-2025:15348-1 FastCGI-2.4.6-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:02372-1 Security update for FastCGI SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:02369-1 Security update for FastCGI SUSE / openSUSE Security Updates · Mar 23, 2026
- WID-SEC-2025-1273 Perl: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Nov 26, 2025
- DLA-4329-1 libfcgi - security update Debian Security (DSA / DLA) · Oct 13, 2025