CVE-2010-3872CWE-121

Httpd: mod_fcgid: stack-based buffer overflow in fcgid_header_bucket_read() in modules/fcgid/fcgid_bucket.c

High · published November 20, 2010

CVSS v3.1
7.5
EPSS
3%
Percentile
86.2
In the wild
Unconfirmed
What it is

A flaw was found in the mod_fcgid module of httpd. A malformed FastCGI response may result in a stack-based buffer overflow in the modules/fcgid/fcgid_bucket.c file in the fcgid_header_bucket_read() function, resulting in an application crash.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.02772 · 86.2th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2010-11-20T20:00Z
EPSS history
Timeline
  • 20 NOV 20:00Z
    Httpd: mod_fcgid: stack-based buffer overflow in fcgid_header_bucket_read() in modules/fcgid/fcgid_bucket.c
    cvelistv5