Note:
This project will be discontinued after December 13, 2021. [more]
2015-02-19
FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service (segmentation fault and crash) via a large number of connections.
Products | Fcgi |
Type | Improper Input Validation (CWE-20) |
First patch | - None (likely due to unavailable code) |
Links |
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681591
• http://www.openwall.com/lists/oss-security/2015/02/07/4 • http://www.openwall.com/lists/oss-security/2015/02/06/4 • http://advisories.mageia.org/MGASA-2015-0184.html • https://bugs.launchpad.net/ubuntu/+source/libfcgi/+bug/933417 |