CVE-2012-2688
Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP...
CVE-2012-2688 is a high vulnerability (CVSS 10.0) in Php, published July 20, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 10.5%, the 95th percentile. No source names a fixed version.
- Severity
- 10.0 HighCVSS 2.0, NVD
- Exploit chance
- 10.5%EPSS, 95th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack vectors, related to an "overflow."
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
php5Debian:6.0 From an advisory covering 2 CVEs | before 5.3.3-7+squeeze14, plus listed versions 5.3.3-75.3.3-7+squeeze15.3.3-7+squeeze135.3.3-7+squeeze25.3.3-7+squeeze3 Show 5 moreShow less5.3.3-7+squeeze55.3.3-7+squeeze65.3.3-7+squeeze75.3.3-7+squeeze85.3.3-7+squeeze9 | 5.3.3-7+squeeze14 |
phpRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-bcmathRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-cliRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-commonRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-dbaRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-develRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-embeddedRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-enchantRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
Show 190 moreShow less
| Package | Affected | Fixed |
|---|---|---|
php-fpmRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-gdRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-imapRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-intlRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-ldapRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-mbstringRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-mysqlRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-odbcRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-pdoRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-pgsqlRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-processRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-pspellRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-recodeRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-snmpRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-soapRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-tidyRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-xmlRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-xmlrpcRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-ztsRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
phpRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-bcmathRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-dbaRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-develRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-embeddedRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-enchantRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-fpmRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-gdRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-imapRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-intlRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-ldapRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-mbstringRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-mysqlRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-odbcRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-pdoRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-pgsqlRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-processRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-pspellRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-recodeRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-snmpRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-soapRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-tidyRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-xmlRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-xmlrpcRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-ztsRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-cliRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-commonRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
phpRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-bcmathRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-dbaRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-develRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-embeddedRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-enchantRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-fpmRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-imapRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-intlRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-mbstringRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-processRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-pspellRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-recodeRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-snmpRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-tidyRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-ztsRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-cliRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-commonRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-gdRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-ldapRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-mysqlRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-odbcRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-pdoRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-pgsqlRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-soapRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-xmlRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-xmlrpcRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
phpRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-bcmathRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-dbaRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-develRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-embeddedRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-enchantRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-fpmRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-imapRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-intlRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-mbstringRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-processRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-pspellRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-recodeRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-snmpRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-tidyRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-ztsRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-cliRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-commonRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-gdRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-ldapRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-mysqlRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-odbcRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-pdoRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-pgsqlRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-soapRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-xmlRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php-xmlrpcRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:5.3.3-22.el6 | 0:5.3.3-22.el6 |
php53Red Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-bcmathRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-cliRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-commonRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-dbaRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-gdRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-imapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-intlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-ldapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-mbstringRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-mysqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-odbcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-pdoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-pgsqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-processRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-pspellRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-snmpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-soapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-xmlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-xmlrpcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53Red Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-bcmathRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-cliRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-commonRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-dbaRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-develRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-gdRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-imapRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-intlRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-ldapRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-mbstringRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-mysqlRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-odbcRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-pdoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-pgsqlRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-processRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-pspellRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-snmpRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-soapRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-xmlRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
php53-xmlrpcRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.3.3-21.el5 | 0:5.3.3-21.el5 |
phpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-bcmathRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-cliRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-commonRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-dbaRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-gdRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-imapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-ldapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-mbstringRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-mysqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-ncursesRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-odbcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-pdoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-pgsqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-snmpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-soapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-xmlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-xmlrpcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
phpRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-bcmathRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-cliRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-commonRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-dbaRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-develRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-gdRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-imapRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-ldapRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-mbstringRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-mysqlRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-ncursesRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-odbcRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-pdoRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-pgsqlRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-snmpRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-soapRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-xmlRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php-xmlrpcRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:5.1.6-43.el5_10 | 0:5.1.6-43.el5_10 |
php7openSUSE:Tumbleweed From an advisory covering 70 CVEs | before 7.0.14-1.4 | 7.0.14-1.4 |
php5openSUSE:Tumbleweed From an advisory covering 71 CVEs | before 5.6.28-1.1 | 5.6.28-1.1 |
php8openSUSE:Tumbleweed From an advisory covering 97 CVEs | before 8.0.11-1.1 | 8.0.11-1.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | shelld3v/CVE-2012-2688 | 2020-03-06 |
What each source reports
NVD Score used 10.0
Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack vectors, related to an "overflow."
- Record
CVE-2012-2688- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack vectors, related to an "overflow."
- Record
CVE-2012-2688- Updated
- 2026-11-02
EUVDEUVD-2012-2670No score
Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack vectors, related to an "overflow."
- Record
EUVD-2012-2670- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5xf9-hrqg-23cpNo score
Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP...
Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack vectors, related to an "overflow."
- Record
GHSA-5xf9-hrqg-23cp- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10290-1No score
apache2-mod_php7-7.0.14-1.4 on GA media
These are all security issues fixed in the apache2-mod_php7-7.0.14-1.4 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10290-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10344-1No score
apache2-mod_php5-5.6.28-1.1 on GA media
These are all security issues fixed in the apache2-mod_php5-5.6.28-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10344-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11169-1No score
php8-8.0.11-1.1 on GA media
These are all security issues fixed in the php8-8.0.11-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11169-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/55078
hermes.opensuse.org/messages/15376003
debian.org/security/2012/dsa-2527
php.net/ChangeLog-5.php
securitytracker.com/id?1027287
securityfocus.com/bid/54638
Show 177 moreShow less
lists.apple.com/archives/security-announce/2012/Sep/msg00004.html
rhn.redhat.com/errata/RHSA-2013-1307.html
support.apple.com/kb/HT5501
lists.opensuse.org/opensuse-security-announce/2012-08/msg00022.html
exchange.xforce.ibmcloud.com/vulnerabilities/77155
mandriva.com/security/advisories?name=MDVSA-2012:108
ubuntu.com/usn/USN-1569-1
lists.opensuse.org/opensuse-security-announce/2012-08/msg00021.html
nvd.nist.gov/vuln/detail/CVE-2012-2688
github.com/advisories/GHSA-5xf9-hrqg-23cp
access.redhat.com/errata/RHSA-2013:0514
access.redhat.com/security/updates/classification
access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.4_Technical_Notes/php.html
bugzilla.redhat.com/show_bug.cgi?id=771738
bugzilla.redhat.com/show_bug.cgi?id=789468
bugzilla.redhat.com/show_bug.cgi?id=812819
bugzilla.redhat.com/show_bug.cgi?id=824199
bugzilla.redhat.com/show_bug.cgi?id=824293
bugzilla.redhat.com/show_bug.cgi?id=828051
bugzilla.redhat.com/show_bug.cgi?id=833545
bugzilla.redhat.com/show_bug.cgi?id=837042
bugzilla.redhat.com/show_bug.cgi?id=853329
bugzilla.redhat.com/show_bug.cgi?id=858653
bugzilla.redhat.com/show_bug.cgi?id=868375
bugzilla.redhat.com/show_bug.cgi?id=874987
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0514.json
access.redhat.com/security/cve/CVE-2011-1398
cve.org/CVERecord?id=CVE-2011-1398
nvd.nist.gov/vuln/detail/CVE-2011-1398
access.redhat.com/security/cve/CVE-2012-0831
cve.org/CVERecord?id=CVE-2012-0831
nvd.nist.gov/vuln/detail/CVE-2012-0831
access.redhat.com/security/cve/CVE-2012-2688
cve.org/CVERecord?id=CVE-2012-2688
access.redhat.com/errata/RHSA-2013:1307
access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/5/html/5.10_Technical_Notes/php53.html
bugzilla.redhat.com/show_bug.cgi?id=662707
bugzilla.redhat.com/show_bug.cgi?id=837044
bugzilla.redhat.com/show_bug.cgi?id=869691
bugzilla.redhat.com/show_bug.cgi?id=869693
bugzilla.redhat.com/show_bug.cgi?id=869697
bugzilla.redhat.com/show_bug.cgi?id=892695
bugzilla.redhat.com/show_bug.cgi?id=918187
bugzilla.redhat.com/show_bug.cgi?id=951075
bugzilla.redhat.com/show_bug.cgi?id=953818
bugzilla.redhat.com/show_bug.cgi?id=997097
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1307.json
access.redhat.com/security/cve/CVE-2006-7243
cve.org/CVERecord?id=CVE-2006-7243
nvd.nist.gov/vuln/detail/CVE-2006-7243
access.redhat.com/security/cve/CVE-2013-1643
cve.org/CVERecord?id=CVE-2013-1643
nvd.nist.gov/vuln/detail/CVE-2013-1643
access.redhat.com/security/cve/CVE-2013-4248
cve.org/CVERecord?id=CVE-2013-4248
nvd.nist.gov/vuln/detail/CVE-2013-4248
access.redhat.com/errata/RHSA-2013:1814
bugzilla.redhat.com/show_bug.cgi?id=1036830
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1814.json
access.redhat.com/security/cve/CVE-2013-6420
cve.org/CVERecord?id=CVE-2013-6420
nvd.nist.gov/vuln/detail/CVE-2013-6420
suse.com/security/cve/CVE-2006-7243
suse.com/security/cve/CVE-2010-2225
suse.com/security/cve/CVE-2010-2950
suse.com/security/cve/CVE-2010-3436
suse.com/security/cve/CVE-2010-3709
suse.com/security/cve/CVE-2010-3710
suse.com/security/cve/CVE-2010-4150
suse.com/security/cve/CVE-2010-4645
suse.com/security/cve/CVE-2011-0420
suse.com/security/cve/CVE-2011-0421
suse.com/security/cve/CVE-2011-0708
suse.com/security/cve/CVE-2011-1092
suse.com/security/cve/CVE-2011-1153
suse.com/security/cve/CVE-2011-1466
suse.com/security/cve/CVE-2011-2202
suse.com/security/cve/CVE-2011-3379
suse.com/security/cve/CVE-2011-4153
suse.com/security/cve/CVE-2011-4566
suse.com/security/cve/CVE-2011-4718
suse.com/security/cve/CVE-2011-4885
suse.com/security/cve/CVE-2012-0830
suse.com/security/cve/CVE-2012-1823
suse.com/security/cve/CVE-2012-2311
suse.com/security/cve/CVE-2012-2335
suse.com/security/cve/CVE-2012-2336
suse.com/security/cve/CVE-2012-2688
suse.com/security/cve/CVE-2012-3365
suse.com/security/cve/CVE-2013-1635
suse.com/security/cve/CVE-2013-1643
suse.com/security/cve/CVE-2013-1824
suse.com/security/cve/CVE-2013-4113
suse.com/security/cve/CVE-2013-4248
suse.com/security/cve/CVE-2013-6420
suse.com/security/cve/CVE-2013-6712
suse.com/security/cve/CVE-2013-7327
suse.com/security/cve/CVE-2013-7345
suse.com/security/cve/CVE-2014-0185
suse.com/security/cve/CVE-2014-0237
suse.com/security/cve/CVE-2014-0238
suse.com/security/cve/CVE-2014-1943
suse.com/security/cve/CVE-2014-2270
suse.com/security/cve/CVE-2014-2497
suse.com/security/cve/CVE-2014-3538
suse.com/security/cve/CVE-2014-3587
suse.com/security/cve/CVE-2014-3597
suse.com/security/cve/CVE-2014-3622
suse.com/security/cve/CVE-2014-3668
suse.com/security/cve/CVE-2014-3669
suse.com/security/cve/CVE-2014-3670
suse.com/security/cve/CVE-2014-4049
suse.com/security/cve/CVE-2014-4670
suse.com/security/cve/CVE-2014-4698
suse.com/security/cve/CVE-2014-5120
suse.com/security/cve/CVE-2014-5459
suse.com/security/cve/CVE-2014-9426
suse.com/security/cve/CVE-2014-9427
suse.com/security/cve/CVE-2015-0231
suse.com/security/cve/CVE-2015-0232
suse.com/security/cve/CVE-2015-0235
suse.com/security/cve/CVE-2015-0273
suse.com/security/cve/CVE-2015-1351
suse.com/security/cve/CVE-2015-1352
suse.com/security/cve/CVE-2015-2305
suse.com/security/cve/CVE-2015-2325
suse.com/security/cve/CVE-2015-2326
suse.com/security/cve/CVE-2015-2331
suse.com/security/cve/CVE-2015-3152
suse.com/security/cve/CVE-2015-3414
suse.com/security/cve/CVE-2015-3415
suse.com/security/cve/CVE-2015-3416
suse.com/security/cve/CVE-2015-4024
suse.com/security/cve/CVE-2005-3353
suse.com/security/cve/CVE-2005-3388
suse.com/security/cve/CVE-2005-3389
suse.com/security/cve/CVE-2005-3390
suse.com/security/cve/CVE-2005-3391
suse.com/security/cve/CVE-2005-3392
suse.com/security/cve/CVE-2006-0996
suse.com/security/cve/CVE-2006-1017
suse.com/security/cve/CVE-2006-1490
suse.com/security/cve/CVE-2006-1494
suse.com/security/cve/CVE-2006-1991
suse.com/security/cve/CVE-2007-4783
suse.com/security/cve/CVE-2007-4887
suse.com/security/cve/CVE-2008-0599
suse.com/security/cve/CVE-2017-9120
suse.com/security/cve/CVE-2018-1000222
suse.com/security/cve/CVE-2018-1000888
suse.com/security/cve/CVE-2018-12882
suse.com/security/cve/CVE-2018-14851
suse.com/security/cve/CVE-2018-17082
suse.com/security/cve/CVE-2018-19935
suse.com/security/cve/CVE-2018-20783
suse.com/security/cve/CVE-2019-11034
suse.com/security/cve/CVE-2019-11035
suse.com/security/cve/CVE-2019-11036
suse.com/security/cve/CVE-2019-11039
suse.com/security/cve/CVE-2019-11040
suse.com/security/cve/CVE-2019-11041
suse.com/security/cve/CVE-2019-11042
suse.com/security/cve/CVE-2019-11043
suse.com/security/cve/CVE-2019-11046
suse.com/security/cve/CVE-2019-9020
suse.com/security/cve/CVE-2019-9021
suse.com/security/cve/CVE-2019-9022
suse.com/security/cve/CVE-2019-9023
suse.com/security/cve/CVE-2019-9024
suse.com/security/cve/CVE-2019-9637
suse.com/security/cve/CVE-2019-9638
suse.com/security/cve/CVE-2019-9640
suse.com/security/cve/CVE-2019-9641
suse.com/security/cve/CVE-2019-9675
suse.com/security/cve/CVE-2020-7062
suse.com/security/cve/CVE-2020-7063
suse.com/security/cve/CVE-2021-21706