CVE-2025-23016 Integer overflow in fcgi
An integer overflow in the FastCGI library allows attackers to trigger a heap-based buffer overflow via crafted IPC socket data, potentially leading to code execution or denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-23016?
CVE-2025-23016 is a critical vulnerability in FastCGI fcgi, published on 10 Jan 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.
Weakness: CWE-190
Which versions are affected by CVE-2025-23016?
Linux distribution packages (18)
FastCGI SUSE:Enterprise Storage 7.1 | All versions | 2.4.0-150000.4.3.1 |
FastCGI SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | All versions | 2.4.0-150000.4.3.1 |
FastCGI SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | All versions | 2.4.0-150000.4.3.1 |
FastCGI SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | All versions | 2.4.0-150000.4.3.1 |
FastCGI SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | All versions | 2.4.0-150000.4.3.1 |
FastCGI SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | All versions | 2.4.0-150000.4.3.1 |
FastCGI SUSE:Linux Enterprise Module for Development Tools 15 SP6 | All versions | 2.4.0-150000.4.3.1 |
FastCGI SUSE:Linux Enterprise Module for Development Tools 15 SP7 | All versions | 2.4.0-150000.4.3.1 |
FastCGI SUSE:Linux Enterprise Server 12 SP5-LTSS | All versions | 2.4.0-169.3.1 |
FastCGI SUSE:Linux Enterprise Server 15 SP3-LTSS | All versions | 2.4.0-150000.4.3.1 |
FastCGI SUSE:Linux Enterprise Server 15 SP4-LTSS | All versions | 2.4.0-150000.4.3.1 |
FastCGI SUSE:Linux Enterprise Server 15 SP5-LTSS | All versions | 2.4.0-150000.4.3.1 |
FastCGI SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | All versions | 2.4.0-169.3.1 |
FastCGI SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | All versions | 2.4.0-150000.4.3.1 |
FastCGI SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | All versions | 2.4.0-150000.4.3.1 |
FastCGI SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | All versions | 2.4.0-150000.4.3.1 |
FastCGI openSUSE:Leap 15.6 | All versions | 2.4.0-150000.4.3.1 |
FastCGI openSUSE:Tumbleweed | All versions | 2.4.6-1.1 |
How do I fix CVE-2025-23016?
Apply the vendor's patch.
Is CVE-2025-23016 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-23016 exists.
Sources
Also known as AZL-55397, AZL-55443, BELL-CVE-2025-23016, DEBIAN-CVE-2025-23016, DLA-4329-1, GHSA-9825-56cx-cfg6 and 8 more.