CVE-2013-4365: Buffer Overflow
Heap-based buffer overflow in the fcgidheaderbucketread function in fcgidbucket.c in the modfcgid module before 2.3.9 for the Apache HTTP Server allows remote attackers to have an unspecified impact via unknown vectors.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4365?
CVE-2013-4365 is classified as a high-severity vulnerability due to its potential for remote exploitation causing a buffer overflow.
How do I fix CVE-2013-4365?
To fix CVE-2013-4365, upgrade the mod_fcgid module to version 2.3.9 or later.
Which versions are affected by CVE-2013-4365?
CVE-2013-4365 affects versions of the mod_fcgid module prior to 2.3.9 and various Debian and openSUSE distributions.
What is the impact of exploiting CVE-2013-4365?
Exploiting CVE-2013-4365 could allow remote attackers to execute arbitrary code or crash the affected Apache server.
Is there a workaround for CVE-2013-4365?
A temporary workaround for CVE-2013-4365 may include disabling the affected mod_fcgid module until an upgrade can be performed.