{"id":"CVE-2025-40907","aliases":["ALSA-2025:8635","ALSA-2025:8636","ALSA-2025:8696","AZL-61899","AZL-61905","CLSA-2025-1762958433","CLSA-2025-1764321881","DEBIAN-CVE-2025-40907","EUVD-2025-15438","GHSA-488m-4fx8-f36v","MGASA-2025-0277","OESA-2025-1544","RHSA-2025:8625","RHSA-2025:8635","RHSA-2025:8636","RHSA-2025:8677","RHSA-2025:8678","RHSA-2025:8696","RHSA-2025:8697","RHSA-2025:8698","RHSA-2025:8703","RHSA-2025:8829","RHSA-2025:8890","RLSA-2025:8635","RLSA-2025:8636","RLSA-2025:8696","UBUNTU-CVE-2025-40907","USN-7527-1"],"status":"published","title":"FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library","description":"FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library.\n\nThe included FastCGI library is affected by  CVE-2025-23016, causing an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00676,"percentile":0.52499,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122","CWE-1395","CWE-190"],"published":"2025-05-16T13:03:02Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"perl-FCGI","fixed_in":["1:0.79-8.1.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"perl-FCGI","fixed_in":["1:0.82-13.1.el10_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"perl-FCGI","fixed_in":["1:0.78-12.module_el8.10.0+4013+e6a7e623","1:0.78-12.module_el8.10.0+4012+cd64a238","1:0.78-12.module_el8.10.0+4011+62915be2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"perl-FCGI","fixed_in":["1:0.79-8.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"perl-FCGI","fixed_in":["1:0.74-8.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libfcgi-perl","fixed_in":["0.79+ds-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libfcgi-perl","fixed_in":["0.79+ds-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libfcgi-perl","fixed_in":["0.79+ds-2"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"perl-FCGI","fixed_in":["0.820.0-3.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"perl-FCGI","fixed_in":["0.82-4.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"perl-FCGI","fixed_in":["0.82-4.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"perl-FCGI","fixed_in":["0.78-14.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"perl-FCGI","fixed_in":["0.78-14.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"perl-FCGI","fixed_in":["0.78-14.oe2203sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"perl-FCGI","fixed_in":["1:0.74-8.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"perl-FCGI-debuginfo","fixed_in":["1:0.74-8.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"perl-FCGI","fixed_in":["1:0.79-8.1.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"perl-FCGI-debuginfo","fixed_in":["1:0.79-8.1.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"perl-FCGI-debugsource","fixed_in":["1:0.79-8.1.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"perl-FCGI","fixed_in":["1:0.82-13.1.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"perl-FCGI-debuginfo","fixed_in":["1:0.82-13.1.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"perl-FCGI-debugsource","fixed_in":["1:0.82-13.1.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"perl-FCGI","fixed_in":["1:0.79-8.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"perl-FCGI-debuginfo","fixed_in":["1:0.79-8.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"perl-FCGI-debugsource","fixed_in":["1:0.79-8.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"perl-FCGI","fixed_in":["1:0.79-8.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"perl-FCGI-debuginfo","fixed_in":["1:0.79-8.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"perl-FCGI-debugsource","fixed_in":["1:0.79-8.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"perl-FCGI","fixed_in":["1:0.78-12.module+el8.10.0+23147+df114ff4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"perl-FCGI-debuginfo","fixed_in":["1:0.78-12.module+el8.10.0+23147+df114ff4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"perl-FCGI-debugsource","fixed_in":["1:0.78-12.module+el8.10.0+23147+df114ff4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"perl-FCGI","fixed_in":["1:0.79-8.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"perl-FCGI-debuginfo","fixed_in":["1:0.79-8.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"perl-FCGI-debugsource","fixed_in":["1:0.79-8.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"perl-FCGI","fixed_in":["1:0.78-11.module+el8.8.0+23188+f6366248.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"perl-FCGI-debuginfo","fixed_in":["1:0.78-11.module+el8.8.0+23188+f6366248.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"perl-FCGI-debugsource","fixed_in":["1:0.78-11.module+el8.8.0+23188+f6366248.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"perl-FCGI","fixed_in":["1:0.78-11.module+el8.8.0+23188+f6366248.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"perl-FCGI-debuginfo","fixed_in":["1:0.78-11.module+el8.8.0+23188+f6366248.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"perl-FCGI-debugsource","fixed_in":["1:0.78-11.module+el8.8.0+23188+f6366248.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"perl-FCGI","fixed_in":["1:0.78-11.module+el8.4.0+23229+35c4aba7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"perl-FCGI-debuginfo","fixed_in":["1:0.78-11.module+el8.4.0+23229+35c4aba7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"perl-FCGI-debugsource","fixed_in":["1:0.78-11.module+el8.4.0+23229+35c4aba7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"perl-FCGI","fixed_in":["1:0.78-11.module+el8.2.0+23234+edafdda3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"perl-FCGI-debuginfo","fixed_in":["1:0.78-11.module+el8.2.0+23234+edafdda3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"perl-FCGI-debugsource","fixed_in":["1:0.78-11.module+el8.2.0+23234+edafdda3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"perl-FCGI","fixed_in":["1:0.78-11.module+el8.6.0+23193+c3786137.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"perl-FCGI-debuginfo","fixed_in":["1:0.78-11.module+el8.6.0+23193+c3786137.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"perl-FCGI-debugsource","fixed_in":["1:0.78-11.module+el8.6.0+23193+c3786137.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"perl-FCGI","fixed_in":["1:0.78-11.module+el8.6.0+23193+c3786137.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"perl-FCGI-debuginfo","fixed_in":["1:0.78-11.module+el8.6.0+23193+c3786137.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"perl-FCGI-debugsource","fixed_in":["1:0.78-11.module+el8.6.0+23193+c3786137.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"perl-FCGI","fixed_in":["1:0.78-11.module+el8.6.0+23193+c3786137.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"perl-FCGI-debuginfo","fixed_in":["1:0.78-11.module+el8.6.0+23193+c3786137.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"perl-FCGI-debugsource","fixed_in":["1:0.78-11.module+el8.6.0+23193+c3786137.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"perl-FCGI","fixed_in":["1:0.79-8.1.el9_6"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"perl-FCGI","fixed_in":["1:0.82-13.1.el10_0"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"perl-FCGI","fixed_in":["1:0.78-12.module+el8.10.0+1990+6591fbc7","1:0.78-12.module+el8.10.0+1990+7f517b07","1:0.78-12.module+el8.10.0+1990+99c43398","1:0.78-12.module+el8.10.0+1990+d30a9ea8"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libfcgi-perl","fixed_in":["0.77-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libfcgi-perl","fixed_in":["0.78-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libfcgi-perl","fixed_in":["0.79-1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.79-8.1.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.82-13.1.el10_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-12.module_el8.10.0+4013+e6a7e623"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-12.module_el8.10.0+4012+cd64a238"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-12.module_el8.10.0+4011+62915be2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.79-4"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.79-4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.79-8.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.74-8.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libfcgi-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79+ds-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libfcgi-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79+ds-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libfcgi-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79+ds-2"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.820.0-3.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.82-4.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.82-4.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.78-14.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.78-14.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.78-14.oe2203sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.74-8.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"perl-FCGI-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.74-8.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.79-8.1.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"perl-FCGI-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.79-8.1.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"perl-FCGI-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.79-8.1.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.82-13.1.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"perl-FCGI-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.82-13.1.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"perl-FCGI-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.82-13.1.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.79-8.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"perl-FCGI-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.79-8.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"perl-FCGI-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.79-8.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.79-8.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"perl-FCGI-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.79-8.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"perl-FCGI-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.79-8.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-12.module+el8.10.0+23147+df114ff4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"perl-FCGI-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-12.module+el8.10.0+23147+df114ff4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"perl-FCGI-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-12.module+el8.10.0+23147+df114ff4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.79-8.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"perl-FCGI-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.79-8.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"perl-FCGI-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.79-8.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-11.module+el8.8.0+23188+f6366248.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"perl-FCGI-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-11.module+el8.8.0+23188+f6366248.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"perl-FCGI-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-11.module+el8.8.0+23188+f6366248.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-11.module+el8.8.0+23188+f6366248.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"perl-FCGI-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-11.module+el8.8.0+23188+f6366248.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"perl-FCGI-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-11.module+el8.8.0+23188+f6366248.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-11.module+el8.4.0+23229+35c4aba7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"perl-FCGI-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-11.module+el8.4.0+23229+35c4aba7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"perl-FCGI-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-11.module+el8.4.0+23229+35c4aba7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-11.module+el8.2.0+23234+edafdda3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"perl-FCGI-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-11.module+el8.2.0+23234+edafdda3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"perl-FCGI-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-11.module+el8.2.0+23234+edafdda3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-11.module+el8.6.0+23193+c3786137.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"perl-FCGI-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-11.module+el8.6.0+23193+c3786137.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"perl-FCGI-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-11.module+el8.6.0+23193+c3786137.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-11.module+el8.6.0+23193+c3786137.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"perl-FCGI-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-11.module+el8.6.0+23193+c3786137.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"perl-FCGI-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-11.module+el8.6.0+23193+c3786137.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-11.module+el8.6.0+23193+c3786137.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"perl-FCGI-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-11.module+el8.6.0+23193+c3786137.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"perl-FCGI-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-11.module+el8.6.0+23193+c3786137.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.79-8.1.el9_6"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.82-13.1.el10_0"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-12.module+el8.10.0+1990+6591fbc7"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-12.module+el8.10.0+1990+7f517b07"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-12.module+el8.10.0+1990+99c43398"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"perl-FCGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.78-12.module+el8.10.0+1990+d30a9ea8"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libfcgi-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.77-1ubuntu0.1~esm1"}]}],"versions":["0.77-1","0.77-1build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libfcgi-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.78-2ubuntu0.1~esm1"}]}],"versions":["0.78-2build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libfcgi-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79-1ubuntu0.1"}]}],"versions":["0.78-2build2","0.78-2build3","0.79-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libfcgi-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.77-1ubuntu0.1~esm1"}]}],"versions":["0.77-1","0.77-1build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libfcgi-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.78-2ubuntu0.1~esm1"}]}],"versions":["0.78-2build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libfcgi-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79-1ubuntu0.1"}]}],"versions":["0.78-2build2","0.78-2build3","0.79-1"]}],"products":[{"vendor":"ether","product":"fcgi"},{"vendor":"fastcgi","product":"fcgi"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2025/04/23/4","tags":["mailing-list","Mailing List","Third Party Advisory","article","report"]},{"url":"https://github.com/FastCGI-Archives/fcgi2/issues/67","tags":["issue-tracking","Exploit","Issue Tracking","report","article"]},{"url":"https://github.com/FastCGI-Archives/fcgi2/releases/tag/2.4.5","tags":["patch","Release Notes","fix","article","report"]},{"url":"https://www.synacktiv.com/en/publications/cve-2025-23016-exploiting-the-fastcgi-library","tags":["technical-description","Exploit","Third Party Advisory","article","report"]},{"url":"https://github.com/perl-catalyst/FCGI/issues/14","tags":["issue-tracking","Exploit","Issue Tracking","report","article"]},{"url":"https://patch-diff.githubusercontent.com/raw/FastCGI-Archives/fcgi2/pull/74.patch","tags":["patch","Patch","fix","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40907","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-488m-4fx8-f36v"},{"url":"https://access.redhat.com/errata/RHSA-2025:8635","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-40907","tags":["report"]},{"url":"https://bugzilla.redhat.com/2366847","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-8635.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8636","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2025-8636.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8696","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-8696.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1762958433.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2025-1764321881.html","tags":["advisory"]},{"url":"https://cpan.org/modules","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40907.json","tags":["advisory"]},{"url":"https://github.com/FastCGI-Archives/fcgi2","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-40907","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0277.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34355","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LVJG5HEXJS2X62ZHSO26DXTMOVBYTU4V/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1544","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8625","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2366847","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8625.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-40907","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8635.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8636.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8677","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8677.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8678","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8678.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8696.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8697","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8697.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8698","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8698.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8703","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8703.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8829","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8829.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8890","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8890.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:8635","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:8636","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:8696","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-40907","tags":["report"]},{"url":"https://lists.security.metacpan.org/cve-announce/msg/29651740/","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7527-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-40907","title":"FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library","description":"FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library.\n\nThe included FastCGI library is affected by  CVE-2025-23016, causing an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.","status":"published","published":"2025-05-16T13:03:02.774Z","modified":"2025-09-05T13:23:05.63Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"adp"}],"cwes":["CWE-1395","CWE-190","CWE-122"],"updated_at":"2026-11-02T14:32:34.434755Z"}],"euvd":[{"id":"EUVD-2025-15438","description":"FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library.\n\nThe included FastCGI library is affected by  CVE-2025-23016, causing an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.","status":"published","published":"2025-05-16T13:03:02Z","modified":"2025-09-05T13:23:05Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T20:31:46.9428Z"}],"ghsa":[{"id":"GHSA-488m-4fx8-f36v","title":"FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka...","description":"FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library.\n\nThe included FastCGI library is affected by  CVE-2025-23016, causing an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.","status":"published","published":"2025-05-16T15:31:02Z","modified":"2025-09-05T15:32:16Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-122","CWE-190"],"updated_at":"2026-11-02T15:03:30.514996Z"}],"nvd":[{"id":"CVE-2025-40907","description":"FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library.\n\nThe included FastCGI library is affected by  CVE-2025-23016, causing an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.","status":"published","published":"2025-05-16T13:15:52.683Z","modified":"2026-06-17T09:22:16.023Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-122","CWE-190"],"updated_at":"2026-11-02T14:11:08.321805Z"}],"osv":[{"id":"CVE-2025-40907","title":"FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library","description":"FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library.\n\nThe included FastCGI library is affected by  CVE-2025-23016, causing an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.","status":"published","published":"2025-05-16T13:03:02.774Z","modified":"2026-10-28T02:30:36.860428536Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-122","CWE-1395","CWE-190"],"updated_at":"2026-11-02T15:44:49.394967Z"},{"id":"DEBIAN-CVE-2025-40907","description":"FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library.  The included FastCGI library is affected by  CVE-2025-23016, causing an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.","status":"published","published":"2025-05-16T13:15:52.683Z","modified":"2026-09-01T20:05:52.147450737Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:46.998514Z"},{"id":"OESA-2025-1544","title":"perl-FCGI security update","description":"FastCGI Perl bingdings.\r\n\r\nSecurity Fix(es):\n\nFCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library.\n\nThe included FastCGI library is affected by  CVE-2025-23016, causing an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.(CVE-2025-40907)","status":"published","published":"2025-05-23T11:08:38Z","modified":"2026-08-18T01:17:58.910894165Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"RHSA-2025:8625","title":"Red Hat Security Advisory: perl-FCGI security update","status":"published","published":"2025-06-09T10:02:17Z","modified":"2026-06-30T10:29:25Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:8635","title":"Red Hat Security Advisory: perl-FCGI security update","status":"published","published":"2025-06-09T10:02:22Z","modified":"2026-06-30T10:29:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:8636","title":"Red Hat Security Advisory: perl-FCGI security update","status":"published","published":"2025-06-09T10:02:23Z","modified":"2026-06-30T10:29:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:8677","title":"Red Hat Security Advisory: perl-FCGI security update","status":"published","published":"2025-06-10T10:03:00Z","modified":"2026-06-30T10:29:34Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:8678","title":"Red Hat Security Advisory: perl-FCGI security update","status":"published","published":"2025-06-10T10:03:00Z","modified":"2026-06-30T10:29:35Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:8696","title":"Red Hat Security Advisory: perl-FCGI:0.78 security update","status":"published","published":"2025-06-10T10:03:10Z","modified":"2026-06-30T10:29:37Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:8697","title":"Red Hat Security Advisory: perl-FCGI security update","status":"published","published":"2025-06-10T10:03:10Z","modified":"2026-06-30T10:29:38Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:8698","title":"Red Hat Security Advisory: perl-FCGI:0.78 security update","status":"published","published":"2025-06-10T10:03:11Z","modified":"2026-06-30T10:29:38Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:8703","title":"Red Hat Security Advisory: perl-FCGI:0.78 security update","status":"published","published":"2025-06-10T10:03:12Z","modified":"2026-06-30T10:29:39Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:8829","title":"Red Hat Security Advisory: perl-FCGI security update","status":"published","published":"2025-06-12T10:02:59Z","modified":"2026-06-30T10:29:45Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:8890","title":"Red Hat Security Advisory: perl-FCGI:0.78 security update","status":"published","published":"2025-06-12T10:03:01Z","modified":"2026-06-30T10:29:47Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RLSA-2025:8635","title":"Important: perl-FCGI security update","description":"FastCGI Perl bindings.\n\nSecurity Fix(es):\n\n* perl-fcgi: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library (CVE-2025-40907)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-04T00:11:30.91642Z","modified":"2025-10-07T17:39:45.867779Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2025:8636","title":"Important: perl-FCGI security update","description":"FastCGI Perl bindings.\n\nSecurity Fix(es):\n\n* perl-fcgi: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library (CVE-2025-40907)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-03T19:56:45.27031Z","modified":"2025-10-08T17:12:41.942318Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2025:8696","title":"Important: perl-FCGI:0.78 security update","description":"The perl-FCGI package provides a Perl module for writing FastCGI applications. FastCGI is a more efficient alternative to traditional CGI, as it keeps application processes persistent across multiple requests. This module allows Perl web applications to handle requests faster and with lower resource overhead, making it suitable for high-traffic environments.\n\nSecurity Fix(es):\n\n* perl-fcgi: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library (CVE-2025-40907)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:38:41.630147Z","modified":"2025-07-29T15:00:12.381243Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"UBUNTU-CVE-2025-40907","description":"FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library. The included FastCGI library is affected by  CVE-2025-23016, causing an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.","status":"published","published":"2025-05-16T13:15:00Z","modified":"2026-02-04T02:18:21.007148Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T16:55:46.53147Z"},{"id":"ALSA-2025:8635","title":"Important: perl-FCGI security update","description":"FastCGI Perl bindings.  \n\nSecurity Fix(es):  \n\n  * perl-fcgi: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library (CVE-2025-40907)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-06-09T00:00:00Z","modified":"2026-10-29T11:32:30.079930871Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2025:8636","title":"Important: perl-FCGI security update","description":"FastCGI Perl bindings.  \n\nSecurity Fix(es):  \n\n  * perl-fcgi: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library (CVE-2025-40907)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-06-09T00:00:00Z","modified":"2026-10-29T11:58:16.667089Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2025:8696","title":"Important: perl-FCGI:0.78 security update","description":"The perl-FCGI package provides a Perl module for writing FastCGI applications. FastCGI is a more efficient alternative to traditional CGI, as it keeps application processes persistent across multiple requests. This module allows Perl web applications to handle requests faster and with lower resource overhead, making it suitable for high-traffic environments.  \n\nSecurity Fix(es):  \n\n  * perl-fcgi: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library (CVE-2025-40907)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-06-09T00:00:00Z","modified":"2026-10-29T11:02:23.237152724Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"AZL-61899","title":"CVE-2025-40907 affecting package perl-FCGI 0.79-4","description":"FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library.\n\nThe included FastCGI library is affected by  CVE-2025-23016, causing an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.","status":"published","published":"2025-05-16T13:15:52Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:21.518778Z"},{"id":"AZL-61905","title":"CVE-2025-40907 affecting package perl-FCGI 0.79-4","description":"FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library.\n\nThe included FastCGI library is affected by  CVE-2025-23016, causing an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.","status":"published","published":"2025-05-16T13:15:52Z","modified":"2026-04-21T04:31:52.988877Z","updated_at":"2026-11-02T15:28:07.805289Z"},{"id":"CLSA-2025-1762958433","title":"perl-FCGI: Fix of CVE-2025-40907","description":"- CVE-2025-40907: fix integer overflow when parsng FastCGI parameters","status":"published","published":"2025-11-12T14:40:42Z","modified":"2026-06-01T00:31:24.720931321Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1764321881","title":"perl-FCGI: Fix of CVE-2025-40907","description":"- CVE-2025-40907: fix integer overflow and heap-based buffer overflow in fcgi2 library","status":"published","published":"2025-11-28T09:24:44Z","modified":"2026-06-01T00:33:14.232066579Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"MGASA-2025-0277","title":"Updated perl-FCGI packages fix security vulnerability","description":"FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version\nof the FastCGI fcgi2 (aka fcgi) library. (CVE-2025-40907)\n","status":"published","published":"2025-11-12T21:29:34Z","modified":"2026-04-16T04:43:15.968713617Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"USN-7527-1","title":"libfcgi-perl vulnerability","description":"It was discovered that libfcgi-perl incorrectly handled certain inputs.\nAn attacker could possibly use this issue to cause a crash or execute\narbitrary code.","status":"published","published":"2025-05-22T06:19:23Z","modified":"2026-06-25T13:32:30.521822065Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}