CVE-2013-4365

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

13.25%

Published

Oct 17, 2013

Modified

Apr 28, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Heap-based buffer overflow in the fcgid_header_bucket_read function in fcgid_bucket.c in the mod_fcgid module before 2.3.9 for the Apache HTTP Server allows remote attackers to have an unspecified impact via unknown vectors.

Weaknesses (CWE)

CWE-787

Affected Products (11)

apache · mod_fcgid (up to 2.3.9)vulnerable

apache · http_server

debian · debian_linuxvulnerable

suse · cloudvulnerable

opensuse · opensusevulnerable

suse · linux_enterprise_software_development_kitvulnerable

References (18)

http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00011.html

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2013-10/msg00055.html

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2013-10/msg00059.html

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2013-11/msg00024.html

Mailing ListThird Party Advisory

http://secunia.com/advisories/55197

Third Party Advisory

http://svn.apache.org/viewvc?view=revision&revision=1527362

PatchVendor Advisory

http://www.debian.org/security/2013/dsa-2778

Third Party Advisory

http://www.mail-archive.com/dev%40httpd.apache.org/msg58077.html

http://www.securityfocus.com/bid/62939

Third Party AdvisoryVDB Entry

http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00011.html

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2013-10/msg00055.html

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2013-10/msg00059.html

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2013-11/msg00024.html

Mailing ListThird Party Advisory

http://secunia.com/advisories/55197

Third Party Advisory

http://svn.apache.org/viewvc?view=revision&revision=1527362

PatchVendor Advisory

http://www.debian.org/security/2013/dsa-2778

Third Party Advisory

http://www.mail-archive.com/dev%40httpd.apache.org/msg58077.html

http://www.securityfocus.com/bid/62939

Third Party AdvisoryVDB Entry

KEV Catalog EPSS Scores Vendors All CVEs