fcgi: denial of service
| Package(s): | fcgi | CVE #(s): | CVE-2012-6687 | ||||||||||||||||||||||||||||
| Created: | April 30, 2015 | Updated: | March 3, 2016 | ||||||||||||||||||||||||||||
| Description: | From the Red Hat bugzilla:
A stack-smashing bug for fcgi was reported to Ubuntu and subsequently patched in both Ubuntu and Debian. According to the bug report, if more than 1024 connections are received, a segfault can occur. A patch is provided with the bug reports: https://bugs.launchpad.net/ubuntu/+source/libfcgi/+bug/933417 and the report at debian: | ||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||