Debian Libapache2-Mod-Fcgid vulnerabilities

CVE-2013-4365 [HIGH] CVE-2013-4365: libapache2-mod-fcgid - Heap-based buffer overflow in the fcgid_header_bucket_read function in fcgid_buc... Heap-based buffer overflow in the fcgid_header_bucket_read function in fcgid_bucket.c in the mod_fcgid module before 2.3.9 for the Apache HTTP Server allows remote attackers to have an unspecified impact via unknown vectors. Scope: local bookworm: resolved (fixed in 1:2.3.9-1) bullseye: resolved (fixed in 1:2.3.9-1) forky: resolved (fixed in 1:2.3.9-1) si

CVE-2010-3872 [HIGH] CVE-2010-3872: libapache2-mod-fcgid - A flaw was found in the mod_fcgid module of httpd. A malformed FastCGI response ... A flaw was found in the mod_fcgid module of httpd. A malformed FastCGI response may result in a stack-based buffer overflow in the modules/fcgid/fcgid_bucket.c file in the fcgid_header_bucket_read() function, resulting in an application crash. Scope: local bookworm: resolved (fixed in 1:2.3.6-1) bullseye: resolved (fixed in 1:2.3.6-1) forky: resolved (fix

CVE-2012-1181 [MEDIUM] CVE-2012-1181: libapache2-mod-fcgid - fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does ... fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a virtual host, which makes it easier for remote attackers to cause a denial of service (memory consumption) via a series of HTTP requests that triggers a process count higher than the intended limit. Scope: local boo