{ "cveId": "CVE-2025-40907", "url": "https://patchblox.com/security/cve/CVE-2025-40907", "summary": "CVE-2025-40907 is fixed in 2 products on 1 platform, first by libfcgi-perl 0.78-2ubuntu0.1~esm1, released May 16, 2025. It is not reported as exploited. Patch Radar priority: High.", "title": "perl-FCGI: The perl-FCGI package provides a Perl module for writing FastCGI applications", "description": "The perl-FCGI package provides a Perl module for writing FastCGI applications. FastCGI is a more efficient alternative to traditional CGI, as it keeps application processes persistent across multiple requests. This module allows Perl web applications to handle requests faster and with lower resource overhead, making it suitable for high-traffic environments.\n\nSecurity Fix(es):\n\n* perl-fcgi: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library (CVE-2025-40907)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "published": "2025-05-16T06:15:00Z", "severity": "Important", "cvss": 7.5, "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "epss": 0.00676, "epssPercentile": 0.52463, "priority": "High", "priorityTier": 3, "exploited": false, "vendorExploited": false, "disclosed": false, "fixes": [ { "platform": "linux", "product": "libfcgi-perl", "release": "Debian 12.15 (bookworm)", "fixedVersion": "0.79\u002Bds-2", "fix": "DEBIAN-CVE-2025-40907", "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-40907", "released": "2025-05-16T13:15:52Z" }, { "platform": "linux", "product": "libfcgi-perl", "release": "Debian 13.5 (trixie)", "fixedVersion": "0.79\u002Bds-2", "fix": "DEBIAN-CVE-2025-40907", "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-40907", "released": "2025-05-16T13:15:52Z" }, { "platform": "linux", "product": "libfcgi-perl", "release": "Debian 14", "fixedVersion": "0.79\u002Bds-2", "fix": "DEBIAN-CVE-2025-40907", "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-40907", "released": "2025-05-16T13:15:52Z" }, { "platform": "linux", "product": "libfcgi-perl", "release": "Ubuntu 18.04.6 LTS (bionic)", "fixedVersion": "0.78-2ubuntu0.1~esm1", "fix": "libfcgi-perl 0.78-2ubuntu0.1~esm1", "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libfcgi-perl-0.78-2ubuntu0.1-esm1", "released": "2025-05-16T06:15:00Z" }, { "platform": "linux", "product": "libfcgi-perl", "release": "Ubuntu 20.04 LTS (focal)", "fixedVersion": "0.79-1ubuntu0.1", "fix": "libfcgi-perl 0.79-1ubuntu0.1", "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libfcgi-perl-0.79-1ubuntu0.1", "released": "2025-05-16T06:15:00Z" }, { "platform": "linux", "product": "perl-FCGI", "release": "RHEL 10", "fixedVersion": "0.82-13.1.el10_0", "fix": "RHSA-2025:8636", "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8636", "released": "2025-05-16T13:03:02Z" }, { "platform": "linux", "product": "perl-FCGI", "release": "RHEL 8", "fixedVersion": "1:0.78-12.module\u002Bel8.10.0\u002B23147\u002B63faba8d", "fix": "RHSA-2025:8696", "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8696", "released": "2025-06-09T00:00:00Z" }, { "platform": "linux", "product": "perl-FCGI", "release": "RHEL 9", "fixedVersion": "1:0.79-8.1.el9_6", "fix": "RHSA-2025:8635", "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8635", "released": "2025-06-09T00:00:00Z" }, { "platform": "linux", "product": "perl-FCGI", "release": "almalinux 10", "fixedVersion": "1:0.82-13.1.el10_0", "fix": "ALSA-2025:8636", "url": "https://patchblox.com/security/fix/linux/alsa-2025-8636", "released": "2025-06-09T00:00:00Z" }, { "platform": "linux", "product": "perl-FCGI", "release": "almalinux 8", "fixedVersion": "1:0.78-12.module_el8.10.0\u002B4013\u002Be6a7e623", "fix": "ALSA-2025:8696", "url": "https://patchblox.com/security/fix/linux/alsa-2025-8696", "released": "2025-06-09T00:00:00Z" }, { "platform": "linux", "product": "perl-FCGI", "release": "almalinux 9", "fixedVersion": "1:0.79-8.1.el9_6", "fix": "ALSA-2025:8635", "url": "https://patchblox.com/security/fix/linux/alsa-2025-8635", "released": "2025-06-09T00:00:00Z" }, { "platform": "linux", "product": "perl-FCGI", "release": "ol 10", "fixedVersion": "1:0.82-13.1.el10_0", "fix": "ELSA-2025-8636", "url": "https://patchblox.com/security/fix/linux/elsa-2025-8636", "released": "2025-06-30T00:00:00Z" }, { "platform": "linux", "product": "perl-FCGI", "release": "ol 8", "fixedVersion": "1:0.78-12.module\u002Bel8.10.0\u002B90610\u002Bf44a9047", "fix": "ELSA-2025-8696", "url": "https://patchblox.com/security/fix/linux/elsa-2025-8696", "released": "2025-06-18T00:00:00Z" }, { "platform": "linux", "product": "perl-FCGI", "release": "ol 9", "fixedVersion": "1:0.79-8.1.el9_6", "fix": "ELSA-2025-8635", "url": "https://patchblox.com/security/fix/linux/elsa-2025-8635", "released": "2025-06-09T00:00:00Z" }, { "platform": "linux", "product": "perl-FCGI", "release": "rocky 10", "fixedVersion": "1:0.82-13.1.el10_0", "fix": "RLSA-2025:8636", "url": "https://patchblox.com/security/fix/linux/rlsa-2025-8636", "released": "2025-10-03T19:56:45Z" }, { "platform": "linux", "product": "perl-FCGI", "release": "rocky 8", "fixedVersion": "1:0.78-12.module\u002Bel8.10.0\u002B1990\u002B6591fbc7", "fix": "RLSA-2025:8696", "url": "https://patchblox.com/security/fix/linux/rlsa-2025-8696", "released": "2025-07-29T13:38:41Z" }, { "platform": "linux", "product": "perl-FCGI", "release": "rocky 9", "fixedVersion": "1:0.79-8.1.el9_6", "fix": "RLSA-2025:8635", "url": "https://patchblox.com/security/fix/linux/rlsa-2025-8635", "released": "2025-10-04T00:11:30Z" } ], "noFixYet": [], "dataAsOf": "2026-11-08T00:53:09Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }