CVE-2012-1181: Buffer Overflow
fcgidspawnctl.c in the modfcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a virtual host, which makes it easier for remote attackers to cause a denial of service (memory consumption) via a series of HTTP requests that triggers a process count higher than the intended limit.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1181?
CVE-2012-1181 is classified as a denial of service vulnerability.
How do I fix CVE-2012-1181?
To fix CVE-2012-1181, upgrade to a version of Apache HTTP Server or mod_fcgid that is newer than 2.3.6.
What systems are affected by CVE-2012-1181?
CVE-2012-1181 affects Apache HTTP Server version 2.3.6 and mod_fcgid version 2.3.6.
What kind of attack does CVE-2012-1181 enable?
CVE-2012-1181 enables remote attackers to cause a denial of service through excessive memory consumption.
Is there a workaround for CVE-2012-1181?
A possible workaround for CVE-2012-1181 includes limiting the number of concurrent requests processed by your web server.