CVE-2025-23016 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-23016 Interim 1 5 2026-03-05T01:14:13Z current 2025-05-19T23:12:35Z 2026-03-05T01:14:13Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-23016 FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-updates/2025-July/040780.html E-Mail link for SUSE-SU-2025:02369-1 https://lists.suse.com/pipermail/sle-updates/2025-July/040778.html E-Mail link for SUSE-SU-2025:02372-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS-TERADATA SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP4-TERADATA SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP7 openSUSE Leap 15.6 openSUSE Tumbleweed FastCGI FastCGI-2.4.0-150000.4.3.1 FastCGI-2.4.6-1.1 FastCGI-2.4.6-160000.2.2 FastCGI-devel FastCGI-devel-2.4.0-150000.4.3.1 FastCGI-devel-2.4.0-169.3.1 FastCGI-devel-2.4.6-1.1 FastCGI-devel-2.4.6-160000.2.2 libfcgi0 libfcgi0-2.4.0-150000.4.3.1 libfcgi0-2.4.6-1.1 libfcgi0-2.4.6-160000.2.2 perl-FCGI-2.4.6-1.1 perl-FCGI-2.4.6-160000.2.2 perl-FastCGI perl-FastCGI-2.4.0-150000.4.3.1 FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Enterprise Storage 7.1 FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Enterprise Storage 7.1 libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Enterprise Storage 7.1 perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Enterprise Storage 7.1 FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP7 FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP7 libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP7 perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP7 FastCGI-devel-2.4.0-169.3.1 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS-TERADATA FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS-TERADATA libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS-TERADATA perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS-TERADATA FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS FastCGI-2.4.6-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 FastCGI-devel-2.4.6-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libfcgi0-2.4.6-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 perl-FCGI-2.4.6-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 FastCGI-devel-2.4.0-169.3.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 FastCGI-2.4.0-150000.4.3.1 as a component of openSUSE Leap 15.6 FastCGI-devel-2.4.0-150000.4.3.1 as a component of openSUSE Leap 15.6 libfcgi0-2.4.0-150000.4.3.1 as a component of openSUSE Leap 15.6 perl-FastCGI-2.4.0-150000.4.3.1 as a component of openSUSE Leap 15.6 FastCGI-2.4.6-1.1 as a component of openSUSE Tumbleweed FastCGI-devel-2.4.6-1.1 as a component of openSUSE Tumbleweed libfcgi0-2.4.6-1.1 as a component of openSUSE Tumbleweed perl-FCGI-2.4.6-1.1 as a component of openSUSE Tumbleweed FastCGI as a component of SUSE Linux Enterprise Server 15 SP1-LTSS FastCGI-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libfcgi0 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS perl-FastCGI as a component of SUSE Linux Enterprise Server 15 SP1-LTSS FastCGI as a component of SUSE Linux Enterprise Server 15 SP2-LTSS FastCGI-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libfcgi0 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS perl-FastCGI as a component of SUSE Linux Enterprise Server 15 SP2-LTSS FastCGI as a component of SUSE Linux Enterprise Server 15-LTSS FastCGI-devel as a component of SUSE Linux Enterprise Server 15-LTSS libfcgi0 as a component of SUSE Linux Enterprise Server 15-LTSS perl-FastCGI as a component of SUSE Linux Enterprise Server 15-LTSS FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c. CVE-2025-23016 SUSE Enterprise Storage 7.1:FastCGI-2.4.0-150000.4.3.1 SUSE Enterprise Storage 7.1:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Enterprise Storage 7.1:libfcgi0-2.4.0-150000.4.3.1 SUSE Enterprise Storage 7.1:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Module for Development Tools 15 SP6:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Module for Development Tools 15 SP6:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise Module for Development Tools 15 SP6:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise Module for Development Tools 15 SP6:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Module for Development Tools 15 SP7:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Module for Development Tools 15 SP7:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise Module for Development Tools 15 SP7:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise Module for Development Tools 15 SP7:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:FastCGI-devel-2.4.0-169.3.1 SUSE Linux Enterprise Server 15 SP2-LTSS-TERADATA:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP2-LTSS-TERADATA:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP2-LTSS-TERADATA:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP2-LTSS-TERADATA:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP3-LTSS:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP3-LTSS:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP3-LTSS:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP3-LTSS:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP4-LTSS:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP4-LTSS:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP4-LTSS:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP4-LTSS:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP5-LTSS:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP5-LTSS:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP5-LTSS:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP5-LTSS:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 16.0:FastCGI-2.4.6-160000.2.2 SUSE Linux Enterprise Server 16.0:FastCGI-devel-2.4.6-160000.2.2 SUSE Linux Enterprise Server 16.0:libfcgi0-2.4.6-160000.2.2 SUSE Linux Enterprise Server 16.0:perl-FCGI-2.4.6-160000.2.2 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:FastCGI-devel-2.4.0-169.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:perl-FastCGI-2.4.0-150000.4.3.1 openSUSE Leap 15.6:FastCGI-2.4.0-150000.4.3.1 openSUSE Leap 15.6:FastCGI-devel-2.4.0-150000.4.3.1 openSUSE Leap 15.6:libfcgi0-2.4.0-150000.4.3.1 openSUSE Leap 15.6:perl-FastCGI-2.4.0-150000.4.3.1 openSUSE Tumbleweed:FastCGI-2.4.6-1.1 openSUSE Tumbleweed:FastCGI-devel-2.4.6-1.1 openSUSE Tumbleweed:libfcgi0-2.4.6-1.1 openSUSE Tumbleweed:perl-FCGI-2.4.6-1.1 important 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H