CVE-2013-4365: Apache Mod Fcgid

High severity, CVSS 7.5. EPSS: 13.2% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the fcgid_header_bucket_read function in fcgid_bucket.c in the mod_fcgid module before 2.3.9 for the Apache HTTP Server allows remote attackers to have an unspecified impact via unknown vectors.

Affected products

• Apache Mod Fcgid: before 2.3.9 (fixed in 2.3.9)
• Debian Debian Linux: version 6.0 only; version 7.0 only
• Opensuse Opensuse: version 11.4 only; version 12.2 only; version 12.3 only
• Suse Cloud: version 1.0 only; version 2.0 only
• Suse Linux Enterprise Software Development Kit: version 11 only

Published 2013-10-17. Last modified 2026-06-16.