Threats tagged 'ghsa-9825-56cx-cfg6'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.3	CVE-2025-23016FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via Critical9.32025-01-10GCVE DatabaseCVE-2025-23016 FastCGI fcgi2 versions 2.x through 2.4.4 contain an integer overflow vulnerability in the ReadParams function of fcgiapp.c. This overflow can lead to a heap-based buffer overflow when processing crafted nameLen or valueLen values sent to the IPC socket. The vulnerability has a high severity with a CVSS score of 9.3, indicating critical impact on confidentiality, integrity, and availability. Vulnerability CWE-190 #ghsa-9825-56cx-cfg6	GCVE Database	2025-01-10

Page 1 of 1