Description
Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack vectors, related to an "overflow."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 6.0 | php5 | 5.3.3-7+squeeze14 | DSA-2527-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | php +26 | 5.3.3-22.el6 | RHSA-2013:0514 |
| RHEL 5 | php +18 | 5.1.6-43.el5_10 | RHSA-2013:1814 |
| RHEL 5 | php53 +20 | 5.3.3-21.el5 | RHSA-2013:1307 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | php5 | 5.6.28-1.1 | openSUSE-SU-2024:10344-1 |
| openSUSE Tumbleweed | php7 | 7.0.14-1.4 | openSUSE-SU-2024:10290-1 |
| openSUSE Tumbleweed | php8 | 8.0.11-1.1 | openSUSE-SU-2024:11169-1 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
shelld3v/CVE-2012-2688 ★ 5 · Mar 6, 2020
A CVE-2012-2688 shell
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 7
- RHSA-2013:1814 Red Hat Security Advisory: php security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2013:0514 Red Hat Security Advisory: php security, bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2013:1307 Red Hat Security Advisory: php53 security, bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-2527-1 php5 - several Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10290-1 apache2-mod_php7-7.0.14-1.4 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10344-1 apache2-mod_php5-5.6.28-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11169-1 php8-8.0.11-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- 55078 third-party-advisory
- openSUSE-SU-2012:0976 vendor-advisory
- DSA-2527 vendor-advisory
- http://www.php.net/ChangeLog-5.php
- 1027287 vdb-entry
- 54638 vdb-entry
- APPLE-SA-2012-09-19-2 vendor-advisory
- RHSA-2013:1307 vendor-advisory
- http://support.apple.com/kb/HT5501
- SUSE-SU-2012:1034 vendor-advisory
- php-phpstreamscandir-unspecified(77155) vdb-entry
- MDVSA-2012:108 vendor-advisory
- USN-1569-1 vendor-advisory
- SUSE-SU-2012:1033 vendor-advisory