Every CVESearch/Get API key

CVE-2012-6687

FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service ...

5.0 MediumFix available

CVE-2012-6687 is a medium vulnerability (CVSS 5.0) in Fastcgi Fcgi, published February 19, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.09%, the 93rd percentile. Fixed in fcgi 2.4.0-7.

What does this mean?
Severity
5.0 MediumCVSS 2.0, NVD
Exploit chance
6.09%EPSS, 93rd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
2.4.0-7fcgi +16 more

Description

FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service (segmentation fault and crash) via a large number of connections.

Exploit likelihood

6.09%Up 4.8 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
fcgi
Azure Linux:3
before 2.4.0-7
2.4.0-7
fcgi
Azure Linux:2
before 2.4.0-7
2.4.0-7
libfcgi
Debian:12
before 2.4.0-8.3
2.4.0-8.3
libfcgi
Debian:13
before 2.4.0-8.3
2.4.0-8.3
libfcgi
Debian:14
before 2.4.0-8.3
2.4.0-8.3
libfcgi-perl
Debian:12
before 0.78-2
0.78-2
libfcgi-perl
Debian:13
before 0.78-2
0.78-2
libfcgi-perl
Debian:14
before 0.78-2
0.78-2
libfcgi
Debian:6.0
before 2.4.0-8+deb6u1, plus listed versions
2.4.0-8
2.4.0-8+deb6u1
libfcgi-perl
Debian:6.0
before 0.71-1+squeeze1+deb6u1, plus listed versions
0.71-10.71-1+squeeze1
0.71-1+squeeze1+deb6u1
Show 7 moreShow less
Affected packages
PackageAffectedFixed
fcgi
Mageia:4
before 2.4.0-15.1.mga4
2.4.0-15.1.mga4
perl-FCGI
Mageia:5
before 0.770.0-4.1.mga5
0.770.0-4.1.mga5
perl-FCGI
openEuler:20.03-LTS-SP4
before 0.78-13.oe2003sp4
0.78-13.oe2003sp4
perl-FCGI
openEuler:24.03-LTS
before 0.82-3.oe2403sp1
0.82-3.oe2403sp1
perl-FCGI
openEuler:22.03-LTS-SP4
before 0.78-13.oe2203sp4
0.78-13.oe2203sp4
perl-FCGI
openEuler:24.03-LTS-SP1
before 0.82-3.oe2403sp1
0.82-3.oe2403sp1
perl-FCGI
openEuler:22.03-LTS-SP3
before 0.78-13.oe2203sp3
0.78-13.oe2203sp3

What each source reports

NVD Score used5.0

FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service (segmentation fault and crash) via a large number of connections.

Record
CVE-2012-6687
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE ListNo score

FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service (segmentation fault and crash) via a large number of connections.

Record
CVE-2012-6687
Updated
2026-11-02
EUVDEUVD-2012-6529No score

FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service (segmentation fault and crash) via a large number of connections.

Record
EUVD-2012-6529
Updated
2026-11-03
GitHub AdvisoriesGHSA-v5rv-9c87-6gwwNo score

FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service ...

FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service (segmentation fault and crash) via a large number of connections.

Record
GHSA-v5rv-9c87-6gww
Weakness
CWE-20
Updated
2026-11-02
OSVAZL-34685No score

CVE-2012-6687 affecting package fcgi for versions less than 2.4.0-7

FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service (segmentation fault and crash) via a large number of connections.

Record
AZL-34685
Updated
2026-11-02
OSVAZL-6418No score

CVE-2012-6687 affecting package fcgi for versions less than 2.4.0-7

FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service (segmentation fault and crash) via a large number of connections.

Record
AZL-6418
Updated
2026-11-02
Show 6 moreShow less
OSVNo score

FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service (segmentation fault and crash) via a large number of connections.

Record
CVE-2012-6687
Updated
2026-11-02
OSVDEBIAN-CVE-2012-6687No score

FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service (segmentation fault and crash) via a large number of connections.

Record
DEBIAN-CVE-2012-6687
Updated
2026-11-02
OSVMGASA-2015-0184No score

Updated fcgi packages fix CVE-2012-6687

Updated fcgi packages fix security vulnerability:

FCGI does not perform range checks for file descriptors before use of the FD_SET macro. This FD_SET macro could allow for more than 1024 total file descriptors to be monitored in the closing state. This may allow remote attackers to cause a denial of service (stack memory corruption, and infinite loop or daemon crash) by opening many socket connections to the host and crashing the service (CVE-2012-6687).

Record
MGASA-2015-0184
Updated
2026-11-02
OSVMGASA-2016-0089No score

Updated perl-FCGI packages fix CVE-2012-6687

Updated fcgi packages fix security vulnerability:

FCGI does not perform range checks for file descriptors before use of the FD_SET macro. This FD_SET macro could allow for more than 1024 total file descriptors to be monitored in the closing state. This may allow remote attackers to cause a denial of service (stack memory corruption, and infinite loop or daemon crash) by opening many socket connections to the host and crashing the service (CVE-2012-6687).

Record
MGASA-2016-0089
Updated
2026-11-02
OSVOESA-2025-1041No score

perl-FCGI security update

FastCGI Perl bingdings.

Security Fix(es):

(CVE-2012-6687)

Record
OESA-2025-1041
Updated
2026-11-02
OSVUBUNTU-CVE-2012-6687No score

FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service (segmentation fault and crash) via a large number of connections.

Record
UBUNTU-CVE-2012-6687
Updated
2026-11-02

History

History
RecordedChangedSources
facts
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 12 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open