CVE-2012-6687

一、漏洞信息
 漏洞编号：[CVE-2012-6687](https://nvd.nist.gov/vuln/detail/CVE-2012-6687)
 漏洞归属组件：[perl-FCGI](https://gitee.com/src-openeuler/perl-FCGI)
 漏洞归属的版本：0.82
 CVSS V2.0分值：
  BaseScore：0.0 None
  Vector：CVSS：2.0/
 漏洞简述：
  FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service (segmentation fault and crash) via a large number of connections.
 漏洞公开时间：2015-02-19 23:59
 漏洞创建时间：2025-01-10 17:21:53
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2012-6687
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| CONFIRM | https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681591 |  |
| CONFIRM | https://bugs.launchpad.net/ubuntu/+source/libfcgi/+bug/933417 |  |
| MLIST | http://www.openwall.com/lists/oss-security/2015/02/07/4 |  |
| CONFIRM | https://bugzilla.redhat.com/show_bug.cgi?id=1189958 |  |
| MLIST | http://www.openwall.com/lists/oss-security/2015/02/06/4 |  |
| CONFIRM | http://advisories.mageia.org/MGASA-2015-0184.html |  |
| XF | https://exchange.xforce.ibmcloud.com/vulnerabilities/100696 |  |
| redhat | https://access.redhat.com/security/cve/CVE-2012-6687 |  |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  其它
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

无
</details>

二、漏洞分析结构反馈
 影响性分析说明：
  The vulnerability CVE-2012-6687 is identified within the FastCGI package, specifically affecting versions up to 2.4.0. It exposes a significant security flaw where improper handling of file descriptors could lead to a denial of service (DoS) via segmentation faults and crashes. This is triggered by a large number of open connections that the system fails to manage effectively. If exploited, this vulnerability can cause the affected services to crash, leading to downtime and potentially allowing attackers to execute further malicious activities during the outage. The failure to correctly manage file descriptors underscores the need for enhanced validation and monitoring mechanisms to prevent the overflow and ensure the stability and security of services relying on the FastCGI package.
 openEuler评分：
  5.0
 Vector：CVSS：2.0/AV:N/AC:L/Au:N/C:N/I:N/A:P
 受影响版本排查(受影响/不受影响)：
  1.master(0.82):受影响
2.openEuler-20.03-LTS-SP4(0.78):受影响
3.openEuler-22.03-LTS-SP3(0.78):受影响
4.openEuler-22.03-LTS-SP4(0.78):受影响
5.openEuler-24.03-LTS(0.82):受影响
6.openEuler-24.03-LTS-Next(0.82):受影响
7.openEuler-24.03-LTS-SP1(0.82):受影响

修复是否涉及abi变化(是/否)：
  1.master(0.82):否
2.openEuler-20.03-LTS-SP4(0.78):否
3.openEuler-22.03-LTS-SP3(0.78):否
4.openEuler-24.03-LTS(0.82):否
5.openEuler-24.03-LTS-Next(0.82):否
6.openEuler-22.03-LTS-SP4(0.78):否
7.openEuler-24.03-LTS-SP1(0.82):否

原因说明：
  1.master(0.82):正常修复
2.openEuler-20.03-LTS-SP4(0.78):正常修复
3.openEuler-22.03-LTS-SP3(0.78):正常修复
4.openEuler-24.03-LTS(0.82):正常修复
5.openEuler-24.03-LTS-Next(0.82):正常修复
6.openEuler-22.03-LTS-SP4(0.78):正常修复
7.openEuler-24.03-LTS-SP1(0.82):正常修复

三、漏洞修复
安全公告链接：https://www.openeuler.org/zh/security/safety-bulletin/detail/?id=openEuler-SA-2025-1041

src-openEuler/perl-FCGI

Content Risk Flag

Comments (10)

src-openEuler/perl-FCGI .gitee-modal { width: 500px !important; }

Content Risk Flag

CVE-2012-6687

Comments (10)

Search

src-openEuler/perl-FCGI