CVE-2013-4365
NoneCVSS
—
EPSS
13.6%
Published
Oct 17, 2013
CISA due date
—
The record
Heap-based buffer overflow in the fcgid_header_bucket_read function in fcgid_bucket.c in the mod_fcgid module before 2.3.9 for the Apache HTTP Server allows remote attackers to have an unspecified impact via unknown vectors.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | libapache2-mod-fcgid | 0 | 1:2.3.9-1 |
| Debian:12 | libapache2-mod-fcgid | 0 | 1:2.3.9-1 |
| Debian:13 | libapache2-mod-fcgid | 0 | 1:2.3.9-1 |
| Debian:6.0 | libapache2-mod-fcgid | 0 | 1:2.3.6-1+squeeze2 |
| Debian:7 | libapache2-mod-fcgid | 0 | 1:2.3.6-1.2+deb7u1 |
| Mageia:2 | apache-mod_fcgid | 0 | 2.3.6-2.2.mga2 |
| Mageia:3 | apache-mod_fcgid | 0 | 2.3.9-1.mga3 |
| openSUSE:Tumbleweed | apache2-mod_fcgid | 0 | 2.3.9-7.3 |
Related vulnerabilities
- CVE-2026-111497 A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli… CWE-787
- CVE-2026-112397 Pillow is a Python imaging library. CWE-787
- CVE-2026-112059 libLAS through 1.8.1 contains a heap out-of-bounds write vulnerability in the point… CWE-787
- CVE-2026-89088 A flaw was found in parted. CWE-787
- CVE-2026-89085 A flaw was found in parted. CWE-787
- CVE-2026-85746 MariaDB server is a community developed fork of MySQL server. CWE-787
- CVE-2026-107815 MariaDB server is a community developed fork of MySQL server. CWE-787
- CVE-2026-56851 The Nickname profile can panic with an out-of-bounds slice error when transforming… CWE-787