Description
fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a virtual host, which makes it easier for remote attackers to cause a denial of service (memory consumption) via a series of HTTP requests that triggers a process count higher than the intended limit.
Remediation
References
Related Vulnerabilities
phpMyAdmin Improper Input Validation Vulnerability (CVE-2011-1941)
WordPress Plugin Rich Table of Contents Cross-Site Scripting (1.3.7)
PHP Out-of-bounds Read Vulnerability (CVE-2018-14851)
XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-36095)
Next.js Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-44578)