Patchwire CVEs, their patch status, and feeds to follow them

CVE-2012-1823

Fixed in a distro release ExploitedEPSS 100%CVSS 9.8

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.

Published 2012-05-11 · In CISA KEV since 2022-03-25 · CVE record · OSV

Products: php, fedoraproject fedora, debian_linux, hp-ux, opensuse, suse linux_enterprise_server, suse linux_enterprise_software_development_kit, apple mac_os_x, redhat application_stack, redhat gluster_storage_server_for_on-premise, redhat storage, redhat storage_for_public_cloud, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_workstation

Distro releases

ReleasePackageFixed in
Debian 6.0php55.3.3-7+squeeze9
Red Hat Enterprise Linux 5php0:5.1.6-34.el5_8
Red Hat Enterprise Linux 5php-bcmath0:5.1.6-34.el5_8
Red Hat Enterprise Linux 5php-cli0:5.1.6-34.el5_8
Red Hat Enterprise Linux 5php-common0:5.1.6-34.el5_8
Red Hat Enterprise Linux 5php-dba0:5.1.6-34.el5_8
Red Hat Enterprise Linux 5php-debuginfo0:5.1.6-34.el5_8
Red Hat Enterprise Linux 5php-devel0:5.1.6-34.el5_8
Red Hat Enterprise Linux 5php-gd0:5.1.6-34.el5_8
Red Hat Enterprise Linux 5php-imap0:5.1.6-34.el5_8
Red Hat Enterprise Linux 5php-ldap0:5.1.6-34.el5_8
Red Hat Enterprise Linux 5php-mbstring0:5.1.6-34.el5_8
Red Hat Enterprise Linux 5php-mysql0:5.1.6-34.el5_8
Red Hat Enterprise Linux 5php-ncurses0:5.1.6-34.el5_8
Red Hat Enterprise Linux 5php-odbc0:5.1.6-34.el5_8
Red Hat Enterprise Linux 5php-pdo0:5.1.6-34.el5_8
Red Hat Enterprise Linux 5php-pgsql0:5.1.6-34.el5_8
Red Hat Enterprise Linux 5php-snmp0:5.1.6-34.el5_8
Red Hat Enterprise Linux 5php-soap0:5.1.6-34.el5_8
Red Hat Enterprise Linux 5php-xml0:5.1.6-34.el5_8
Red Hat Enterprise Linux 5php-xmlrpc0:5.1.6-34.el5_8
Red Hat Enterprise Linux 5php530:5.3.3-7.el5_8
Red Hat Enterprise Linux 5php53-bcmath0:5.3.3-7.el5_8
Red Hat Enterprise Linux 5php53-cli0:5.3.3-7.el5_8
Red Hat Enterprise Linux 5php53-common0:5.3.3-7.el5_8
Red Hat Enterprise Linux 5php53-dba0:5.3.3-7.el5_8
Red Hat Enterprise Linux 5php53-debuginfo0:5.3.3-7.el5_8
Red Hat Enterprise Linux 5php53-devel0:5.3.3-7.el5_8
Red Hat Enterprise Linux 5php53-gd0:5.3.3-7.el5_8
Red Hat Enterprise Linux 5php53-imap0:5.3.3-7.el5_8
Red Hat Enterprise Linux 5php53-intl0:5.3.3-7.el5_8
Red Hat Enterprise Linux 5php53-ldap0:5.3.3-7.el5_8
Red Hat Enterprise Linux 5php53-mbstring0:5.3.3-7.el5_8
Red Hat Enterprise Linux 5php53-mysql0:5.3.3-7.el5_8
Red Hat Enterprise Linux 5php53-odbc0:5.3.3-7.el5_8
Red Hat Enterprise Linux 5php53-pdo0:5.3.3-7.el5_8
Red Hat Enterprise Linux 5php53-pgsql0:5.3.3-7.el5_8
Red Hat Enterprise Linux 5php53-process0:5.3.3-7.el5_8
Red Hat Enterprise Linux 5php53-pspell0:5.3.3-7.el5_8
Red Hat Enterprise Linux 5php53-snmp0:5.3.3-7.el5_8
Red Hat Enterprise Linux 5php53-soap0:5.3.3-7.el5_8
Red Hat Enterprise Linux 5php53-xml0:5.3.3-7.el5_8
Red Hat Enterprise Linux 5php53-xmlrpc0:5.3.3-7.el5_8
Red Hat Enterprise Linux 6php0:5.3.3-3.el6_2.8
Red Hat Enterprise Linux 6php-bcmath0:5.3.3-3.el6_2.8
Red Hat Enterprise Linux 6php-cli0:5.3.3-3.el6_2.8
Red Hat Enterprise Linux 6php-common0:5.3.3-3.el6_2.8
Red Hat Enterprise Linux 6php-dba0:5.3.3-3.el6_2.8
Red Hat Enterprise Linux 6php-debuginfo0:5.3.3-3.el6_2.8
Red Hat Enterprise Linux 6php-devel0:5.3.3-3.el6_2.8
Red Hat Enterprise Linux 6php-embedded0:5.3.3-3.el6_2.8
Red Hat Enterprise Linux 6php-enchant0:5.3.3-3.el6_2.8
Red Hat Enterprise Linux 6php-gd0:5.3.3-3.el6_2.8
Red Hat Enterprise Linux 6php-imap0:5.3.3-3.el6_2.8
Red Hat Enterprise Linux 6php-intl0:5.3.3-3.el6_2.8
Red Hat Enterprise Linux 6php-ldap0:5.3.3-3.el6_2.8
Red Hat Enterprise Linux 6php-mbstring0:5.3.3-3.el6_2.8
Red Hat Enterprise Linux 6php-mysql0:5.3.3-3.el6_2.8
Red Hat Enterprise Linux 6php-odbc0:5.3.3-3.el6_2.8
Red Hat Enterprise Linux 6php-pdo0:5.3.3-3.el6_2.8
Red Hat Enterprise Linux 6php-pgsql0:5.3.3-3.el6_2.8
Red Hat Enterprise Linux 6php-process0:5.3.3-3.el6_2.8
Red Hat Enterprise Linux 6php-pspell0:5.3.3-3.el6_2.8
Red Hat Enterprise Linux 6php-recode0:5.3.3-3.el6_2.8
Red Hat Enterprise Linux 6php-snmp0:5.3.3-3.el6_2.8
Red Hat Enterprise Linux 6php-soap0:5.3.3-3.el6_2.8
Red Hat Enterprise Linux 6php-tidy0:5.3.3-3.el6_2.8
Red Hat Enterprise Linux 6php-xml0:5.3.3-3.el6_2.8
Red Hat Enterprise Linux 6php-xmlrpc0:5.3.3-3.el6_2.8
Red Hat Enterprise Linux 6php-zts0:5.3.3-3.el6_2.8
Red Hat rhel application stack 2php0:5.2.10-2.el5s2
Red Hat rhel application stack 2php-bcmath0:5.2.10-2.el5s2
Red Hat rhel application stack 2php-cli0:5.2.10-2.el5s2
Red Hat rhel application stack 2php-common0:5.2.10-2.el5s2
Red Hat rhel application stack 2php-dba0:5.2.10-2.el5s2
Red Hat rhel application stack 2php-debuginfo0:5.2.10-2.el5s2
Red Hat rhel application stack 2php-devel0:5.2.10-2.el5s2
Red Hat rhel application stack 2php-gd0:5.2.10-2.el5s2
Red Hat rhel application stack 2php-imap0:5.2.10-2.el5s2
Red Hat rhel application stack 2php-ldap0:5.2.10-2.el5s2
Red Hat rhel application stack 2php-mbstring0:5.2.10-2.el5s2
Red Hat rhel application stack 2php-mysql0:5.2.10-2.el5s2
Red Hat rhel application stack 2php-ncurses0:5.2.10-2.el5s2
Red Hat rhel application stack 2php-odbc0:5.2.10-2.el5s2
Red Hat rhel application stack 2php-pdo0:5.2.10-2.el5s2
Red Hat rhel application stack 2php-pgsql0:5.2.10-2.el5s2
Red Hat rhel application stack 2php-snmp0:5.2.10-2.el5s2
Red Hat rhel application stack 2php-soap0:5.2.10-2.el5s2
Red Hat rhel application stack 2php-xml0:5.2.10-2.el5s2
Red Hat rhel application stack 2php-xmlrpc0:5.2.10-2.el5s2
Red Hat rhel eus 5.6php0:5.1.6-27.el5_6.4
Red Hat rhel eus 5.6php-bcmath0:5.1.6-27.el5_6.4
Red Hat rhel eus 5.6php-cli0:5.1.6-27.el5_6.4
Red Hat rhel eus 5.6php-common0:5.1.6-27.el5_6.4
Red Hat rhel eus 5.6php-dba0:5.1.6-27.el5_6.4
Red Hat rhel eus 5.6php-debuginfo0:5.1.6-27.el5_6.4
Red Hat rhel eus 5.6php-devel0:5.1.6-27.el5_6.4
Red Hat rhel eus 5.6php-gd0:5.1.6-27.el5_6.4
Red Hat rhel eus 5.6php-imap0:5.1.6-27.el5_6.4
Red Hat rhel eus 5.6php-ldap0:5.1.6-27.el5_6.4
Red Hat rhel eus 5.6php-mbstring0:5.1.6-27.el5_6.4
Red Hat rhel eus 5.6php-mysql0:5.1.6-27.el5_6.4
Red Hat rhel eus 5.6php-ncurses0:5.1.6-27.el5_6.4
Red Hat rhel eus 5.6php-odbc0:5.1.6-27.el5_6.4
Red Hat rhel eus 5.6php-pdo0:5.1.6-27.el5_6.4
Red Hat rhel eus 5.6php-pgsql0:5.1.6-27.el5_6.4
Red Hat rhel eus 5.6php-snmp0:5.1.6-27.el5_6.4
Red Hat rhel eus 5.6php-soap0:5.1.6-27.el5_6.4
Red Hat rhel eus 5.6php-xml0:5.1.6-27.el5_6.4
Red Hat rhel eus 5.6php-xmlrpc0:5.1.6-27.el5_6.4
Red Hat rhel eus 5.6php530:5.3.3-1.el5_6.2
Red Hat rhel eus 5.6php53-bcmath0:5.3.3-1.el5_6.2
Red Hat rhel eus 5.6php53-cli0:5.3.3-1.el5_6.2
Red Hat rhel eus 5.6php53-common0:5.3.3-1.el5_6.2
Red Hat rhel eus 5.6php53-dba0:5.3.3-1.el5_6.2
Red Hat rhel eus 5.6php53-debuginfo0:5.3.3-1.el5_6.2
Red Hat rhel eus 5.6php53-devel0:5.3.3-1.el5_6.2
Red Hat rhel eus 5.6php53-gd0:5.3.3-1.el5_6.2
Red Hat rhel eus 5.6php53-imap0:5.3.3-1.el5_6.2
Red Hat rhel eus 5.6php53-intl0:5.3.3-1.el5_6.2
Red Hat rhel eus 5.6php53-ldap0:5.3.3-1.el5_6.2
Red Hat rhel eus 5.6php53-mbstring0:5.3.3-1.el5_6.2
Red Hat rhel eus 5.6php53-mysql0:5.3.3-1.el5_6.2
Red Hat rhel eus 5.6php53-odbc0:5.3.3-1.el5_6.2
Red Hat rhel eus 5.6php53-pdo0:5.3.3-1.el5_6.2
Red Hat rhel eus 5.6php53-pgsql0:5.3.3-1.el5_6.2
Red Hat rhel eus 5.6php53-process0:5.3.3-1.el5_6.2
Red Hat rhel eus 5.6php53-pspell0:5.3.3-1.el5_6.2
Red Hat rhel eus 5.6php53-snmp0:5.3.3-1.el5_6.2
Red Hat rhel eus 5.6php53-soap0:5.3.3-1.el5_6.2
Red Hat rhel eus 5.6php53-xml0:5.3.3-1.el5_6.2
Red Hat rhel eus 5.6php53-xmlrpc0:5.3.3-1.el5_6.2
Red Hat rhel eus 6.0php0:5.3.2-6.el6_0.2
Red Hat rhel eus 6.0php-bcmath0:5.3.2-6.el6_0.2
Red Hat rhel eus 6.0php-cli0:5.3.2-6.el6_0.2
Red Hat rhel eus 6.0php-common0:5.3.2-6.el6_0.2
Red Hat rhel eus 6.0php-dba0:5.3.2-6.el6_0.2
Red Hat rhel eus 6.0php-debuginfo0:5.3.2-6.el6_0.2
Red Hat rhel eus 6.0php-devel0:5.3.2-6.el6_0.2
Red Hat rhel eus 6.0php-embedded0:5.3.2-6.el6_0.2
Red Hat rhel eus 6.0php-enchant0:5.3.2-6.el6_0.2
Red Hat rhel eus 6.0php-gd0:5.3.2-6.el6_0.2
Red Hat rhel eus 6.0php-imap0:5.3.2-6.el6_0.2
Red Hat rhel eus 6.0php-intl0:5.3.2-6.el6_0.2
Red Hat rhel eus 6.0php-ldap0:5.3.2-6.el6_0.2
Red Hat rhel eus 6.0php-mbstring0:5.3.2-6.el6_0.2
Red Hat rhel eus 6.0php-mysql0:5.3.2-6.el6_0.2
Red Hat rhel eus 6.0php-odbc0:5.3.2-6.el6_0.2
Red Hat rhel eus 6.0php-pdo0:5.3.2-6.el6_0.2
Red Hat rhel eus 6.0php-pgsql0:5.3.2-6.el6_0.2
Red Hat rhel eus 6.0php-process0:5.3.2-6.el6_0.2
Red Hat rhel eus 6.0php-pspell0:5.3.2-6.el6_0.2
Red Hat rhel eus 6.0php-recode0:5.3.2-6.el6_0.2
Red Hat rhel eus 6.0php-snmp0:5.3.2-6.el6_0.2
Red Hat rhel eus 6.0php-soap0:5.3.2-6.el6_0.2
Red Hat rhel eus 6.0php-tidy0:5.3.2-6.el6_0.2
Red Hat rhel eus 6.0php-xml0:5.3.2-6.el6_0.2
Red Hat rhel eus 6.0php-xmlrpc0:5.3.2-6.el6_0.2
Red Hat rhel eus 6.0php-zts0:5.3.2-6.el6_0.2
Red Hat rhel eus 6.1php0:5.3.3-3.el6_1.4
Red Hat rhel eus 6.1php-bcmath0:5.3.3-3.el6_1.4
Red Hat rhel eus 6.1php-cli0:5.3.3-3.el6_1.4
Red Hat rhel eus 6.1php-common0:5.3.3-3.el6_1.4
Red Hat rhel eus 6.1php-dba0:5.3.3-3.el6_1.4
Red Hat rhel eus 6.1php-debuginfo0:5.3.3-3.el6_1.4
Red Hat rhel eus 6.1php-devel0:5.3.3-3.el6_1.4
Red Hat rhel eus 6.1php-embedded0:5.3.3-3.el6_1.4
Red Hat rhel eus 6.1php-enchant0:5.3.3-3.el6_1.4
Red Hat rhel eus 6.1php-gd0:5.3.3-3.el6_1.4
Red Hat rhel eus 6.1php-imap0:5.3.3-3.el6_1.4
Red Hat rhel eus 6.1php-intl0:5.3.3-3.el6_1.4
Red Hat rhel eus 6.1php-ldap0:5.3.3-3.el6_1.4
Red Hat rhel eus 6.1php-mbstring0:5.3.3-3.el6_1.4
Red Hat rhel eus 6.1php-mysql0:5.3.3-3.el6_1.4
Red Hat rhel eus 6.1php-odbc0:5.3.3-3.el6_1.4
Red Hat rhel eus 6.1php-pdo0:5.3.3-3.el6_1.4
Red Hat rhel eus 6.1php-pgsql0:5.3.3-3.el6_1.4
Red Hat rhel eus 6.1php-process0:5.3.3-3.el6_1.4
Red Hat rhel eus 6.1php-pspell0:5.3.3-3.el6_1.4
Red Hat rhel eus 6.1php-recode0:5.3.3-3.el6_1.4
Red Hat rhel eus 6.1php-snmp0:5.3.3-3.el6_1.4
Red Hat rhel eus 6.1php-soap0:5.3.3-3.el6_1.4
Red Hat rhel eus 6.1php-tidy0:5.3.3-3.el6_1.4
Red Hat rhel eus 6.1php-xml0:5.3.3-3.el6_1.4
Red Hat rhel eus 6.1php-xmlrpc0:5.3.3-3.el6_1.4
Red Hat rhel eus 6.1php-zts0:5.3.3-3.el6_1.4
Red Hat rhel mission critical 5.3php0:5.1.6-23.3.el5_3
Red Hat rhel mission critical 5.3php-bcmath0:5.1.6-23.3.el5_3
Red Hat rhel mission critical 5.3php-cli0:5.1.6-23.3.el5_3
Red Hat rhel mission critical 5.3php-common0:5.1.6-23.3.el5_3
Red Hat rhel mission critical 5.3php-dba0:5.1.6-23.3.el5_3
Red Hat rhel mission critical 5.3php-debuginfo0:5.1.6-23.3.el5_3
Red Hat rhel mission critical 5.3php-devel0:5.1.6-23.3.el5_3
Red Hat rhel mission critical 5.3php-gd0:5.1.6-23.3.el5_3
Red Hat rhel mission critical 5.3php-imap0:5.1.6-23.3.el5_3
Red Hat rhel mission critical 5.3php-ldap0:5.1.6-23.3.el5_3
Red Hat rhel mission critical 5.3php-mbstring0:5.1.6-23.3.el5_3
Red Hat rhel mission critical 5.3php-mysql0:5.1.6-23.3.el5_3
Red Hat rhel mission critical 5.3php-ncurses0:5.1.6-23.3.el5_3
Red Hat rhel mission critical 5.3php-odbc0:5.1.6-23.3.el5_3
Red Hat rhel mission critical 5.3php-pdo0:5.1.6-23.3.el5_3
Red Hat rhel mission critical 5.3php-pgsql0:5.1.6-23.3.el5_3
Red Hat rhel mission critical 5.3php-snmp0:5.1.6-23.3.el5_3
Red Hat rhel mission critical 5.3php-soap0:5.1.6-23.3.el5_3
Red Hat rhel mission critical 5.3php-xml0:5.1.6-23.3.el5_3
Red Hat rhel mission critical 5.3php-xmlrpc0:5.1.6-23.3.el5_3
openSUSE Tumbleweedphp55.6.28-1.1
openSUSE Tumbleweedphp77.0.14-1.4
openSUSE Tumbleweedphp88.0.11-1.1