USN-9051-1: libfcgi vulnerability
Published Nov 11, 2026
It was discovered that FastCGI incorrectly handled certain parameter lengths, leading to an integer overflow and a heap-based buffer overflow. An attacker could possibly use this issue to cause applications using FastCGI to crash, resulting in a denial of service, or execute arbitrary code.
Affected Software
3 affected componentsFixes available
ubuntu/libfcgi<2.4.0-8.3ubuntu0.1~esm1
2.4.0-8.3ubuntu0.1~esm1
ubuntu/libfcgi<2.4.0-10ubuntu0.18.04.1~esm1
2.4.0-10ubuntu0.18.04.1~esm1
ubuntu/libfcgi<2.4.0-10ubuntu0.20.04.1~esm1
2.4.0-10ubuntu0.20.04.1~esm1
Event History
Nov 11, 2026
Advisory Published
via OSV·06:27 PM
Data Sourced
via OSV·06:27 PM
DescriptionAffected Software