Every CVESearch/Get API key

CVE-2012-2336

sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script ...

5.0 MediumPublic exploit

CVE-2012-2336 is a medium vulnerability (CVSS 5.0) in Php, published May 11, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 52.1%, the 98th percentile. No source names a fixed version.

What does this mean?
Severity
5.0 MediumCVSS 2.0, NVD
Exploit chance
52.1%EPSS, 98th percentile
Exploitation
None known4 public exploits
Fixed in
No fix listedNo source names one

Description

sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to cause a denial of service (resource consumption) by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'T' case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.

Exploit likelihood

52.1%Up 50.1 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
php
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-bcmath
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-cli
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-common
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-dba
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-gd
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-imap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-ldap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
Show 184 moreShow less
Affected packages
PackageAffectedFixed
php-mbstring
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-mysql
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-ncurses
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-odbc
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-pdo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-pgsql
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-snmp
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-soap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-xml
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-xmlrpc
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-bcmath
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-cli
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-common
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-dba
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-gd
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-imap
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-ldap
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-mbstring
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-mysql
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-ncurses
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-odbc
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-pdo
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-pgsql
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-snmp
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-soap
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-xml
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-xmlrpc
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-bcmath
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-cli
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-common
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-dba
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-embedded
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-enchant
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-gd
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-imap
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-intl
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-ldap
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-mbstring
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-mysql
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-odbc
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-pdo
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-pgsql
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-process
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-pspell
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-recode
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-snmp
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-soap
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-tidy
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-xml
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-xmlrpc
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-zts
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-cli
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-common
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-bcmath
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-dba
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-embedded
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-enchant
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-gd
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-imap
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-intl
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-ldap
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-mbstring
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-mysql
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-odbc
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-pdo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-pgsql
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-process
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-pspell
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-recode
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-snmp
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-soap
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-tidy
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-xml
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-xmlrpc
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-zts
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-cli
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-common
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-gd
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-ldap
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-mysql
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-odbc
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-pdo
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-pgsql
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-soap
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-xml
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-xmlrpc
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-bcmath
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-dba
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-embedded
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-enchant
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-imap
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-intl
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-mbstring
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-process
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-pspell
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-recode
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-snmp
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-tidy
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-zts
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-cli
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-common
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-gd
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-ldap
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-mysql
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-odbc
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-pdo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-pgsql
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-soap
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-xml
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-xmlrpc
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-bcmath
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-dba
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-embedded
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-enchant
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-imap
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-intl
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-mbstring
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-process
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-pspell
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-recode
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-snmp
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-tidy
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-zts
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php53
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-bcmath
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-cli
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-common
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-dba
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-gd
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-imap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-intl
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-ldap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-mbstring
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-mysql
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-odbc
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-pdo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-pgsql
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-process
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-pspell
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-snmp
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-soap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-xml
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-xmlrpc
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-bcmath
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-cli
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-common
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-dba
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-gd
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-imap
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-intl
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-ldap
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-mbstring
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-mysql
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-odbc
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-pdo
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-pgsql
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-process
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-pspell
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-snmp
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-soap
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-xml
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-xmlrpc
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php7
openSUSE:Tumbleweed
From an advisory covering 70 CVEs
before 7.0.14-1.4
7.0.14-1.4
php5
openSUSE:Tumbleweed
From an advisory covering 71 CVEs
before 5.6.28-1.1
5.6.28-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBPHP 5.3.12/5.4.2 - CGI Argument Injection (Metasploit)2012-05-04
Exploit-DBPHP < 5.3.12 / < 5.4.2 - CGI Argument Injection2012-05-05
Exploit-DBApache + PHP < 5.3.12 / < 5.4.2 - cgi-bin Remote Code Execution2013-10-29
Exploit-DBApache + PHP < 5.3.12 / < 5.4.2 - Remote Code Execution + Scanner2013-10-31

What each source reports

NVD Score used5.0

sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to cause a denial of service (resource consumption) by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'T' case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.

Record
CVE-2012-2336
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE ListNo score

sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to cause a denial of service (resource consumption) by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'T' case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.

Record
CVE-2012-2336
Updated
2026-11-02
EUVDEUVD-2012-2329No score

sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to cause a denial of service (resource consumption) by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'T' case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.

Record
EUVD-2012-2329
Updated
2026-11-03
GitHub AdvisoriesGHSA-gjrg-p28q-p9w2No score

sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script ...

sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to cause a denial of service (resource consumption) by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'T' case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.

Record
GHSA-gjrg-p28q-p9w2
Weakness
CWE-20
Updated
2026-11-02
OSVBELL-CVE-2012-23365.0

CVE-2012-2336 does not affect BellSoft software

Record
BELL-CVE-2012-2336
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
OSVopenSUSE-SU-2024:10290-1No score

apache2-mod_php7-7.0.14-1.4 on GA media

These are all security issues fixed in the apache2-mod_php7-7.0.14-1.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10290-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10344-1No score

apache2-mod_php5-5.6.28-1.1 on GA media

These are all security issues fixed in the apache2-mod_php5-5.6.28-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10344-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 120 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open