Fluid Attacks Database

Description

FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service (segmentation fault and crash) via a large number of connections.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 14	libfcgi	>=0 <2.4.0-8.3	2.4.0-8.3
debian 13	libfcgi	>=0 <2.4.0-8.3	2.4.0-8.3
debian 12	libfcgi-perl	>=0 <0.78-2	0.78-2
debian 11	libfcgi-perl	>=0 <0.78-2	0.78-2
debian 13	libfcgi-perl	>=0 <0.78-2	0.78-2
debian 11	libfcgi	>=0 <2.4.0-8.3	2.4.0-8.3
debian 14	libfcgi-perl	>=0 <0.78-2	0.78-2
debian 12	libfcgi	>=0 <2.4.0-8.3	2.4.0-8.3

Aliases

1. CVE-2012-66872. NVD-2012-66873. OSV-DEBIAN-2012-66874. OSV-2012-66875. SECURITY-TRACKER-CVE-2012-6687

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.