CVE-2013-4365

mod_fcgid < 2.3.9 - Heap-based Buffer Overflow in fcgid_header_bucket_read

Title source: llm

Description

Heap-based buffer overflow in the fcgid_header_bucket_read function in fcgid_bucket.c in the mod_fcgid module before 2.3.9 for the Apache HTTP Server allows remote attackers to have an unspecified impact via unknown vectors.

References (9)

Core 9

Core References

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/55197

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-updates/2013-10/msg00059.html

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-updates/2013-10/msg00055.html

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2013/dsa-2778

Patch, Vendor Advisory x_refsource_confirm

http://svn.apache.org/viewvc?view=revision&revision=1527362

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/62939

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-updates/2013-11/msg00024.html

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00011.html

Mailing List mailing-list x_refsource_mlist

http://www.mail-archive.com/dev%40httpd.apache.org/msg58077.html

Scores

EPSS 0.0666

EPSS Percentile 91.3%

Details

CWE

CWE-787

Status published

Products (9)

apache/mod_fcgid < 2.3.9

debian/debian_linux 6.0

debian/debian_linux 7.0

opensuse/opensuse 11.4

opensuse/opensuse 12.2

opensuse/opensuse 12.3

suse/cloud 1.0

suse/cloud 2.0

suse/linux_enterprise_software_development_kit 11 sp2 (2 CPE variants)

Published Oct 17, 2013

Tracked Since Feb 18, 2026