REDHAT-BUG-2366847: Buffer Overflow
FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library.
The included FastCGI library is affected by CVE-2025-23016, causing an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2366847?
The severity of REDHAT-BUG-2366847 is considered high due to the potential for heap-based buffer overflows.
How do I fix REDHAT-BUG-2366847?
To fix REDHAT-BUG-2366847, update to a version of FCGI greater than 0.82 that addresses the vulnerability.
What is CVE-2025-23016 related to REDHAT-BUG-2366847?
CVE-2025-23016 involves an integer overflow leading to a heap-based buffer overflow in the FastCGI library.
Which versions of FCGI are affected by REDHAT-BUG-2366847?
FCGI versions from 0.44 to 0.82 are affected by REDHAT-BUG-2366847.
What impact does REDHAT-BUG-2366847 have on applications?
REDHAT-BUG-2366847 can compromise application stability and lead to potential security breaches due to buffer overflow vulnerabilities.