Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2012-6687

21
FAUCET Score

CVE-2012-6687 describes a denial-of-service vulnerability in FastCGI (fcgi and libfcgi) version 2.4.0, where a remote attacker can trigger a segmentation fault and crash by initiating a large number of connections. This vulnerability has a CVSS score of 5.0, indicating a medium severity, with a low attack complexity and no authentication required, leading to a partial availability impact. Despite its FAUCET Risk Score of 80/100 and an EPSS score suggesting it's more exploitable than many CVEs, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
2.4.0CPE matchmatch criteria
cpe:2.3:a:fastcgi:fcgi:2.4.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

5.0MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P

Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
2.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
6.09%
Probability of exploitation in next 30 days
EPSS Percentile
92.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
This CVE's current EPSS score of 0.0609 is in the 90th percentile among its peer group of 23,701 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (42)

microsoftpatch availablevia msrc
Product: cm1 fcgi 2.4.0-7 on CBL Mariner 1.0Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: cbl2 fcgi 2.4.0-7 on CBL Mariner 2.0Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: azl3 fcgi 2.4.0-7 on Azure Linux 3.0Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: 13017-12139Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: 19224-16820Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: 19225-16823Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: 19226-17084Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: 13013-12137Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: 13014-12138Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: 13015-12138Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: 13018-12139Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: 13019-12139Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: 13021-12140Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: 13022-12140Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: 13011-12137Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: 13012-12137Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: 13016-12138Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: 13020-12140Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: 13023-12356Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: 13024-12356Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: 13025-12357Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: 13026-12357Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: CBL Mariner 1.0 x64Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: CBL Mariner 1.0 ARMFixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: fcgi-2.4.0-7.cm1.x86_64.rpm on CBL Mariner 1.0 x64Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: fcgi-devel-2.4.0-7.cm1.x86_64.rpm on CBL Mariner 1.0 x64Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: fcgi-debuginfo-2.4.0-7.cm1.x86_64.rpm on CBL Mariner 1.0 x64Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: fcgi-2.4.0-7.cm1.aarch64.rpm on CBL Mariner 1.0 ARMFixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: fcgi-devel-2.4.0-7.cm1.aarch64.rpm on CBL Mariner 1.0 ARMFixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: fcgi-debuginfo-2.4.0-7.cm1.aarch64.rpm on CBL Mariner 1.0 ARMFixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: fcgi-2.4.0-7.cm2.x86_64.rpm on CBL Mariner 2.0 x64Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: fcgi-devel-2.4.0-7.cm2.x86_64.rpm on CBL Mariner 2.0 x64Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: fcgi-debuginfo-2.4.0-7.cm2.x86_64.rpm on CBL Mariner 2.0 x64Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: fcgi-2.4.0-7.cm2.aarch64.rpm on CBL Mariner 2.0 ARMFixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: fcgi-devel-2.4.0-7.cm2.aarch64.rpm on CBL Mariner 2.0 ARMFixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: fcgi-debuginfo-2.4.0-7.cm2.aarch64.rpm on CBL Mariner 2.0 ARMFixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: fcgi-2.4.0-7.azl3.x86_64.rpm on Azure Linux 3.0 x64Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: fcgi-devel-2.4.0-7.azl3.x86_64.rpm on Azure Linux 3.0 x64Fixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: fcgi-2.4.0-7.azl3.aarch64.rpm on Azure Linux 3.0 ARMFixed in: 2.4.0-7
microsoftpatch availablevia msrc
Product: fcgi-devel-2.4.0-7.azl3.aarch64.rpm on Azure Linux 3.0 ARMFixed in: 2.4.0-7

Vendor Advisories (4)

microsoft2024-Jun/CVE-2012-6687

CVE-2012-6687

Jun 11, 2024
microsoft2020-Aug/CVE-2012-6687

CVE-2012-6687

Aug 11, 2020
microsoft2015-Feb/CVE-2012-6687Moderate

FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service (segmentation fault and crash) via a large number of connections.

Feb 2, 2015
redhatCVE-2012-6687Moderate

fcgi: numerous connections cause segfault DoS

Jul 14, 2012

References

advisories.mageia.org / MGASA-2015-0184.html
bugs.debian.org / cgi-bin/bugreport.cgi
bugs.launchpad.net / ubuntu/+source/libfcgi/+bug/933417
bugzilla.redhat.com / show_bug.cgi
exchange.xforce.ibmcloud.com / vulnerabilities/100696
openwall.com / lists/oss-security/2015/02/06/4
openwall.com / lists/oss-security/2015/02/07/4