CVE-2012-1181
fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the...
fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a virtual host, which makes it easier for remote attackers to cause a denial of service (memory consumption) via a series of HTTP requests that triggers a process count higher than the intended limit.
Exploit likelihood
What each source reports
NVD Score used
fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a virtual host, which makes it easier for remote attackers to cause a denial of service (memory consumption) via a series of HTTP requests that triggers a process count higher than the intended limit.
- Record
CVE-2012-1181- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a virtual host, which makes it easier for remote attackers to cause a denial of service (memory consumption) via a series of HTTP requests that triggers a process count higher than the intended limit.
- Record
CVE-2012-1181- Updated
- 2026-11-02
EUVDEUVD-2012-1210 No score
fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a virtual host, which makes it easier for remote attackers to cause a denial of service (memory consumption) via a series of HTTP requests that triggers a process count higher than the intended limit.
- Record
EUVD-2012-1210- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jp83-4w56-5w6x No score
fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the...
fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a virtual host, which makes it easier for remote attackers to cause a denial of service (memory consumption) via a series of HTTP requests that triggers a process count higher than the intended limit.
- Record
GHSA-jp83-4w56-5w6x- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a virtual host, which makes it easier for remote attackers to cause a denial of service (memory consumption) via a series of HTTP requests that triggers a process count higher than the intended limit.
- Record
CVE-2012-1181- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-1181 No score
fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a virtual host, which makes it easier for remote attackers to cause a denial of service (memory consumption) via a series of HTTP requests that triggers a process count higher than the intended limit.
- Record
DEBIAN-CVE-2012-1181- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libapache2-mod-fcgidDebian:12 |
before 1:2.3.6-1.1 | 1:2.3.6-1.1 |
libapache2-mod-fcgidDebian:13 |
before 1:2.3.6-1.1 | 1:2.3.6-1.1 |
libapache2-mod-fcgidDebian:14 |
before 1:2.3.6-1.1 | 1:2.3.6-1.1 |
libapache2-mod-fcgidDebian:6.0 |
before 1:2.3.6-1+squeeze1, plus listed versions 1:2.3.6-1 |
1:2.3.6-1+squeeze1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-1181 is a medium vulnerability (CVSS 5.0) in Apache Mod Fcgid, published March 19, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.64%, the 91st percentile. Fixed in libapache2-mod-fcgid 1:2.3.6-1.1.