7.5
High
CVE-2010-3872 A flaw was found in the mod_fcgid module of httpd
Description
A flaw was found in the mod_fcgid module of httpd. A malformed FastCGI response may result in a stack-based buffer overflow in the modules/fcgid/fcgid_bucket.c file in the fcgid_header_bucket_read() function, resulting in an application crash.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| mod_fcgid 2.3 | earliest → < 2.3.6 | 2.3.6 |
| Red Hat Enterprise Linux 7 | Versions not published | |
| Red Hat Enterprise Linux 8 | Versions not published | |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Fedora | Versions not published |
References
- FEDORA-2010-17474 lists.fedoraproject.org
- FEDORA-2010-17434 lists.fedoraproject.org
- FEDORA-2010-17472 lists.fedoraproject.org
- openSUSE-SU-2011:0884 lists.opensuse.org
- SUSE-SU-2011:0885 lists.opensuse.org
- 69275 osvdb.org
- 42288 secunia.com
- 42302 secunia.com
- 42815 secunia.com
- DSA-2140 www.debian.org
- [apache] 20101107 [ANNOUNCE] mod_fcgid 2.3.6 is released www.gossamer-threads.com
- 44900 www.securityfocus.com
- ADV-2010-2997 www.vupen.com
- ADV-2010-2998 www.vupen.com
- ADV-2011-0031 www.vupen.com
- access.redhat.com access.redhat.com
- RHBZ#2248172 bugzilla.redhat.com
- apache-fcgid-bo(63303) exchange.xforce.ibmcloud.com
- github.com github.com
- issues.apache.org issues.apache.org
Timeline
- Published
- Last modified