Apache Mod Fcgid vulnerabilities

4 CVEs affecting Apache Mod Fcgid, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-1000104, published 2019-12-03.

More from Apache.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-4365, published 2013-10-17. High severity, CVSS 7.5. EPSS: 13.6% chance of exploitation in the next 30 days. Heap-based buffer overflow in the fcgid_header_bucket_read function in fcgid_bucket.c in the mod_fcgid module before 2.3.9 for the Apache HTTP Server allows remote attackers to have an unspecified…
• CVE-2012-1181, published 2012-03-19. Medium severity, CVSS 5.0. EPSS: 4.8% chance of exploitation in the next 30 days. fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a virtual host, which makes it easier for remote attackers to…
• CVE-2010-3872, published 2010-11-22. High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days. A flaw was found in the mod_fcgid module of httpd. A malformed FastCGI response may result in a stack-based buffer overflow in the modules/fcgid/fcgid_bucket.c file in the fcgid_header_bucket_read()…
• CVE-2016-1000104, published 2019-12-03. High severity, CVSS 8.8. EPSS: 2.2% chance of exploitation in the next 30 days. A security Bypass vulnerability exists in the FcgidPassHeader Proxy in mod_fcgid through 2016-07-07.