CVE-2012-2688

Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP...

10.0 HighPublic exploitFix available

Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack vectors, related to an "overflow."

Exploit likelihood

10.5%Down 14.1 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

Record: CVE-2012-2688
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

Record: CVE-2012-2688
Updated: 2026-11-02

EUVDEUVD-2012-2670 No score

Record: EUVD-2012-2670
Updated: 2026-11-03

GitHub AdvisoriesGHSA-5xf9-hrqg-23cp No score

Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP...

Record: GHSA-5xf9-hrqg-23cp
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10290-1 No score

apache2-mod_php7-7.0.14-1.4 on GA media

These are all security issues fixed in the apache2-mod_php7-7.0.14-1.4 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10290-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10344-1 No score

apache2-mod_php5-5.6.28-1.1 on GA media

These are all security issues fixed in the apache2-mod_php5-5.6.28-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10344-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:11169-1 No score

php8-8.0.11-1.1 on GA media

These are all security issues fixed in the php8-8.0.11-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:11169-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`php5` Debian:6.0	before 5.3.3-7+squeeze14, plus listed versions 5.3.3-75.3.3-7+squeeze15.3.3-7+squeeze135.3.3-7+squeeze25.3.3-7+squeeze3 Show 5 moreShow less 5.3.3-7+squeeze55.3.3-7+squeeze65.3.3-7+squeeze75.3.3-7+squeeze85.3.3-7+squeeze9	5.3.3-7+squeeze14
`php` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-bcmath` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-cli` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-common` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-dba` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-debuginfo` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-devel` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-embedded` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-enchant` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6

Show 190 moreShow less

Affected packages
Package	Affected	Fixed
`php-fpm` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-gd` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-imap` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-intl` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-ldap` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-mbstring` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-mysql` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-odbc` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-pdo` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-pgsql` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-process` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-pspell` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-recode` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-snmp` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-soap` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-tidy` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-xml` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-xmlrpc` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-zts` Red Hat:enterprise_linux:6::client	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-bcmath` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-dba` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-debuginfo` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-devel` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-embedded` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-enchant` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-fpm` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-gd` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-imap` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-intl` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-ldap` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-mbstring` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-mysql` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-odbc` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-pdo` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-pgsql` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-process` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-pspell` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-recode` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-snmp` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-soap` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-tidy` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-xml` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-xmlrpc` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-zts` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-cli` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-common` Red Hat:enterprise_linux:6::computenode	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-bcmath` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-dba` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-debuginfo` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-devel` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-embedded` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-enchant` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-fpm` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-imap` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-intl` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-mbstring` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-process` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-pspell` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-recode` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-snmp` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-tidy` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-zts` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-cli` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-common` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-gd` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-ldap` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-mysql` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-odbc` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-pdo` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-pgsql` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-soap` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-xml` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-xmlrpc` Red Hat:enterprise_linux:6::server	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-bcmath` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-dba` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-devel` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-embedded` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-enchant` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-fpm` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-imap` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-intl` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-mbstring` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-process` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-pspell` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-recode` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-snmp` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-tidy` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-zts` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-cli` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-common` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-gd` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-ldap` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-mysql` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-odbc` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-pdo` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-pgsql` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-soap` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-xml` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php-xmlrpc` Red Hat:enterprise_linux:6::workstation	before 0:5.3.3-22.el6	0:5.3.3-22.el6
`php53` Red Hat:enterprise_linux:5::client_workstation	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-bcmath` Red Hat:enterprise_linux:5::client_workstation	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-cli` Red Hat:enterprise_linux:5::client_workstation	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-common` Red Hat:enterprise_linux:5::client_workstation	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-dba` Red Hat:enterprise_linux:5::client_workstation	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-debuginfo` Red Hat:enterprise_linux:5::client_workstation	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-devel` Red Hat:enterprise_linux:5::client_workstation	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-gd` Red Hat:enterprise_linux:5::client_workstation	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-imap` Red Hat:enterprise_linux:5::client_workstation	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-intl` Red Hat:enterprise_linux:5::client_workstation	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-ldap` Red Hat:enterprise_linux:5::client_workstation	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-mbstring` Red Hat:enterprise_linux:5::client_workstation	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-mysql` Red Hat:enterprise_linux:5::client_workstation	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-odbc` Red Hat:enterprise_linux:5::client_workstation	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-pdo` Red Hat:enterprise_linux:5::client_workstation	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-pgsql` Red Hat:enterprise_linux:5::client_workstation	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-process` Red Hat:enterprise_linux:5::client_workstation	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-pspell` Red Hat:enterprise_linux:5::client_workstation	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-snmp` Red Hat:enterprise_linux:5::client_workstation	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-soap` Red Hat:enterprise_linux:5::client_workstation	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-xml` Red Hat:enterprise_linux:5::client_workstation	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-xmlrpc` Red Hat:enterprise_linux:5::client_workstation	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53` Red Hat:enterprise_linux:5::server	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-bcmath` Red Hat:enterprise_linux:5::server	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-cli` Red Hat:enterprise_linux:5::server	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-common` Red Hat:enterprise_linux:5::server	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-dba` Red Hat:enterprise_linux:5::server	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-debuginfo` Red Hat:enterprise_linux:5::server	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-devel` Red Hat:enterprise_linux:5::server	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-gd` Red Hat:enterprise_linux:5::server	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-imap` Red Hat:enterprise_linux:5::server	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-intl` Red Hat:enterprise_linux:5::server	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-ldap` Red Hat:enterprise_linux:5::server	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-mbstring` Red Hat:enterprise_linux:5::server	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-mysql` Red Hat:enterprise_linux:5::server	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-odbc` Red Hat:enterprise_linux:5::server	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-pdo` Red Hat:enterprise_linux:5::server	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-pgsql` Red Hat:enterprise_linux:5::server	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-process` Red Hat:enterprise_linux:5::server	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-pspell` Red Hat:enterprise_linux:5::server	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-snmp` Red Hat:enterprise_linux:5::server	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-soap` Red Hat:enterprise_linux:5::server	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-xml` Red Hat:enterprise_linux:5::server	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php53-xmlrpc` Red Hat:enterprise_linux:5::server	before 0:5.3.3-21.el5	0:5.3.3-21.el5
`php` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-bcmath` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-cli` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-common` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-dba` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-debuginfo` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-devel` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-gd` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-imap` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-ldap` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-mbstring` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-mysql` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-ncurses` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-odbc` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-pdo` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-pgsql` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-snmp` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-soap` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-xml` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-xmlrpc` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php` Red Hat:enterprise_linux:5::server	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-bcmath` Red Hat:enterprise_linux:5::server	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-cli` Red Hat:enterprise_linux:5::server	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-common` Red Hat:enterprise_linux:5::server	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-dba` Red Hat:enterprise_linux:5::server	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-debuginfo` Red Hat:enterprise_linux:5::server	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-devel` Red Hat:enterprise_linux:5::server	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-gd` Red Hat:enterprise_linux:5::server	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-imap` Red Hat:enterprise_linux:5::server	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-ldap` Red Hat:enterprise_linux:5::server	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-mbstring` Red Hat:enterprise_linux:5::server	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-mysql` Red Hat:enterprise_linux:5::server	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-ncurses` Red Hat:enterprise_linux:5::server	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-odbc` Red Hat:enterprise_linux:5::server	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-pdo` Red Hat:enterprise_linux:5::server	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-pgsql` Red Hat:enterprise_linux:5::server	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-snmp` Red Hat:enterprise_linux:5::server	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-soap` Red Hat:enterprise_linux:5::server	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-xml` Red Hat:enterprise_linux:5::server	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php-xmlrpc` Red Hat:enterprise_linux:5::server	before 0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
`php7` openSUSE:Tumbleweed	before 7.0.14-1.4	7.0.14-1.4
`php5` openSUSE:Tumbleweed	before 5.6.28-1.1	5.6.28-1.1
`php8` openSUSE:Tumbleweed	before 8.0.11-1.1	8.0.11-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
PoC in GitHub	shelld3v/CVE-2012-2688	2020-03-06

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-2688 is a high vulnerability (CVSS 10.0) in Php, published July 20, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 10.5%, the 95th percentile. Fixed in php5 5.3.3-7+squeeze14.

References

Show 177 moreShow less