{"id":"CVE-2010-3872","aliases":["DEBIAN-CVE-2010-3872","DSA-2140-1","EUVD-2010-3850","GHSA-ff73-846q-p888","openSUSE-SU-2024:10564-1"],"status":"published","title":"Httpd: mod_fcgid: stack-based buffer overflow in fcgid_header_bucket_read() in modules/fcgid/fcgid_bucket.c","description":"A flaw was found in the mod_fcgid module of httpd. A malformed FastCGI response may result in a stack-based buffer overflow in the modules/fcgid/fcgid_bucket.c file in the fcgid_header_bucket_read() function, resulting in an application crash.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.02772,"percentile":0.86416,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-121","CWE-189"],"published":"2010-11-20T20:00:00Z","modified":"2026-10-23T18:02:43Z","fixes":[{"ecosystem":"Debian:12","package":"libapache2-mod-fcgid","fixed_in":["1:2.3.6-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libapache2-mod-fcgid","fixed_in":["1:2.3.6-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libapache2-mod-fcgid","fixed_in":["1:2.3.6-1"],"sources":["osv"]},{"ecosystem":"Debian:5.0","package":"libapache2-mod-fcgid","fixed_in":["1:2.2-1+lenny1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libapache2-mod-fcgid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.6-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libapache2-mod-fcgid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.6-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libapache2-mod-fcgid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.6-1"}]}]},{"source":"osv","ecosystem":"Debian:5.0","package":"libapache2-mod-fcgid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2-1+lenny1"}]}],"versions":["1:2.2-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"apache2-mod_fcgid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.9-7.3"}]}],"bundled":3}],"products":[{"vendor":"apache","product":"mod_fcgid"},{"vendor":"fedora","product":"fedora"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050930.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050932.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050976.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00004.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00005.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://osvdb.org/69275","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"http://secunia.com/advisories/42288","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/42302","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/42815","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.debian.org/security/2010/dsa-2140","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://www.gossamer-threads.com/lists/apache/announce/391406","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/44900","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.vupen.com/english/advisories/2010/2997","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2998","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0031","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-3872","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2248172","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","report"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/63303","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"https://github.com/apache/httpd-mod_fcgid/commit/b1afa70840b4ab4e6fbc12ac8798b2f3ccc336b2","tags":["x_transferred","fix"]},{"url":"https://issues.apache.org/bugzilla/show_bug.cgi?id=49406","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3872"},{"url":"https://github.com/advisories/GHSA-ff73-846q-p888"},{"url":"https://security-tracker.debian.org/tracker/CVE-2010-3872","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1000104","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2010-3872","title":"Httpd: mod_fcgid: stack-based buffer overflow in fcgid_header_bucket_read() in modules/fcgid/fcgid_bucket.c","description":"A flaw was found in the mod_fcgid module of httpd. A malformed FastCGI response may result in a stack-based buffer overflow in the modules/fcgid/fcgid_bucket.c file in the fcgid_header_bucket_read() function, resulting in an application crash.","status":"published","published":"2010-11-20T20:00:00Z","modified":"2024-08-07T03:26:12.242Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:33:28.115387Z"}],"euvd":[{"id":"EUVD-2010-3850","description":"A flaw was found in the mod_fcgid module of httpd. A malformed FastCGI response may result in a stack-based buffer overflow in the modules/fcgid/fcgid_bucket.c file in the fcgid_header_bucket_read() function, resulting in an application crash.","status":"published","published":"2010-11-20T20:00:00Z","modified":"2024-08-07T03:26:12Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T01:39:32.539513Z"}],"ghsa":[{"id":"GHSA-ff73-846q-p888","title":"The fcgid_header_bucket_read function in fcgid_bucket.c in the mod_fcgid module before 2.3.6 for...","description":"The fcgid_header_bucket_read function in fcgid_bucket.c in the mod_fcgid module before 2.3.6 for the Apache HTTP Server does not use bytewise pointer arithmetic in certain circumstances, which has unspecified impact and attack vectors related to \"untrusted FastCGI applications\" and a \"stack buffer overwrite.\"","status":"published","published":"2022-05-17T02:04:55Z","modified":"2023-11-07T21:30:22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:54:53.779138Z"}],"nvd":[{"id":"CVE-2010-3872","description":"A flaw was found in the mod_fcgid module of httpd. A malformed FastCGI response may result in a stack-based buffer overflow in the modules/fcgid/fcgid_bucket.c file in the fcgid_header_bucket_read() function, resulting in an application crash.","status":"published","published":"2010-11-22T12:54:10.3Z","modified":"2026-06-16T23:23:43.79Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-121","CWE-189"],"updated_at":"2026-11-02T14:02:00.37682Z"}],"osv":[{"id":"DEBIAN-CVE-2010-3872","description":"A flaw was found in the mod_fcgid module of httpd. A malformed FastCGI response may result in a stack-based buffer overflow in the modules/fcgid/fcgid_bucket.c file in the fcgid_header_bucket_read() function, resulting in an application crash.","status":"published","published":"2010-11-22T12:54:10.3Z","modified":"2026-10-23T18:02:43.710029335Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:24.316685Z"},{"id":"CVE-2010-3872","description":"A flaw was found in the mod_fcgid module of httpd. A malformed FastCGI response may result in a stack-based buffer overflow in the modules/fcgid/fcgid_bucket.c file in the fcgid_header_bucket_read() function, resulting in an application crash.","status":"published","published":"2010-11-22T12:54:10Z","modified":"2026-04-10T03:41:27.332532Z","updated_at":"2026-11-02T15:43:57.991581Z"},{"id":"DSA-2140-1","title":"libapache2-mod-fcgid - stack overflow","status":"published","published":"2011-01-05T00:00:00Z","modified":"2026-03-09T01:18:08.221985Z","updated_at":"2026-11-02T15:46:15.108335Z"},{"id":"openSUSE-SU-2024:10564-1","title":"apache2-mod_fcgid-2.3.9-7.3 on GA media","description":"These are all security issues fixed in the apache2-mod_fcgid-2.3.9-7.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:43:09.783027Z","updated_at":"2026-11-02T16:58:34.487567Z"}]}}