Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
整数溢出或超界折返
Vulnerability Title
fcgi2 安全漏洞
Vulnerability Description
fcgi2是FastCGI-Archives开源的一个 FastCGI 开发人员工具包。 fcgi2 2.x版本至2.4.4版本存在安全漏洞，该漏洞源于存在整数溢出，攻击者可以通过精心设计的nameLen或valueLen值将数据发送到IPC套接字。
CVSS Information
N/A
Vulnerability Type
N/A