FastCGI

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

FastCGI records in CISA KEV

No FastCGI vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Fcgi 2 records MEDIUM

Records

3 records

TI-2025-16828 CVE-2025-23016 · GHSA-9825-56cx-cfg6

Integer overflow in FastCGI fcgi

HIGH 75

FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00613 Published 2025-01-10 No fix listed CWE-190

TI-2025-27301 CVE-2025-40907 · GHSA-488m-4fx8-f36v

Heap-based buffer overflow in ether FCGI

MEDIUM 57

FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00676 Published 2025-05-16 Fixed CWE-122

TI-2012-05391 CVE-2012-6687 · GHSA-v5rv-9c87-6gww

FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service…

LOW 32

FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service (segmentation fault and crash) via a large number of connections.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.06086 Published 2015-02-19 No fix listed CWE-20

Open these records in search →

Critical	1
High	0
Medium	2
Low	0
No CVSS	0