Lucene search
F5F5:K15480HistoryAug 07, 2014 - 12:00 a.m.
K15480 : PHP vulnerability CVE-2012-2688
2014-08-0700:00:00
my.f5.com
11
Security Advisory Description
Description
Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack vectors, related to an βoverflow.β (CVE-2012-2688)
Impact
None. F5 products are not affected by this vulnerability.
Status
F5 Product Development has evaluated the currently supported releases for potential vulnerability.
To determine if your release is known to be vulnerable, the components or features that are affected by the vulnerability, and for information about releases or hotfixes that address the vulnerability, refer to the following table:
| Product | Versions known to be vulnerable | Versions known to be not vulnerable | Vulnerable component or feature |
|---|---|---|---|
| BIG-IP LTM | None | ||
| 11.0.0 - 11.5.1 | |||
| 10.0.0 - 10.2.4 | |||
| None | |||
| BIG-IP AAM | None | 11.4.0 - 11.5.1 | None |
| BIG-IP AFM | None | 11.3.0 - 11.5.1 | None |
| BIG-IP Analytics | None | 11.0.0 - 11.5.1 | None |
| BIG-IP APM | None | 11.0.0 - 11.5.1 | |
| 10.1.0 - 10.2.4 | None | ||
| BIG-IP ASM | None | 11.0.0 - 11.5.1 | |
| 10.0.0 - 10.2.4 | None | ||
| BIG-IP Edge Gateway | |||
| None | 11.0.0 - 11.3.0 | ||
| 10.1.0 - 10.2.4 | None | ||
| BIG-IP GTM | None | 11.0.0 - 11.5.1 | |
| 10.0.0 - 10.2.4 | None | ||
| BIG-IP Link Controller | None | ||
| 11.0.0 - 11.5.1 | |||
| 10.0.0 - 10.2.4 | |||
| None | |||
| BIG-IP PEM | None | ||
| 11.3.0 - 11.5.1 | |||
| None | |||
| BIG-IP PSM | None | 11.0.0 - 11.4.1 | |
| 10.0.0 - 10.2.4 | None | ||
| BIG-IP WebAccelerator | None | 11.0.0 - 11.3.0 | |
| 10.0.0 - 10.2.4 | None | ||
| BIG-IP WOM | None | 11.0.0 - 11.3.0 | |
| 10.0.0 - 10.2.4 | None | ||
| ARX | None | 6.1.1 - 6.4.0 | |
| 5.0.0 - 5.3.1 | |||
| None | |||
| Enterprise Manager | None | 3.0.0 - 3.1.1 | |
| 2.0.0 - 2.3.0 | None | ||
| FirePass | None | 7.0.0 | |
| 6.1.0 | None | ||
| BIG-IQ Cloud | None | ||
| 4.0.0 - 4.3.0 | |||
| None | |||
| BIG-IQ Device | None | 4.2.0 - 4.3.0 | None |
| BIG-IQ Security | None | ||
| 4.0.0 - 4.3.0 | |||
| None | |||
| LineRate | None | 2.2.0 - 2.4.0 | None |
Recommended Action
None
Supplemental Information
Related
veracode
veracode
Remote Code Execution (RCE)
2019-05-02 04:52:37
openvas
openvas
Slackware Advisory SSA:2012-204-01 php
2012-09-10 00:00:00
Fedora Update for maniadrive FEDORA-2012-10908
2012-08-06 00:00:00
Fedora Update for maniadrive FEDORA-2012-10936
2012-08-30 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: php-eaccelerator-0.9.6.1-9.fc16.7
2012-08-05 21:22:14
[SECURITY] Fedora 17 Update: maniadrive-1.2-43.fc17
2012-08-05 21:27:45
[SECURITY] Fedora 16 Update: maniadrive-1.2-32.fc16.7
2012-08-05 21:22:14
ubuntucve
ubuntucve
CVE-2012-2688
2012-07-20 00:00:00
f5
f5
SOL15480 - PHP vulnerability CVE-2012-2688
2014-08-06 00:00:00
nessus
nessus
Fedora 16 : maniadrive-1.2-32.fc16.7 / php-5.3.15-1.fc16 / php-eaccelerator-0.9.6.1-9.fc16.7 (2012-10908)
2012-08-06 00:00:00
FreeBSD : php -- potential overflow in _php_stream_scandir (bdab0acd-d4cd-11e1-8a1c-14dae9ebcf89)
2012-07-24 00:00:00
Fedora 17 : maniadrive-1.2-43.fc17 / php-5.4.5-1.fc17 (2012-10936)
2012-08-06 00:00:00
nvd
nvd
CVE-2012-2688
2012-07-20 10:40:36
cve
cve
CVE-2012-2688
2012-07-20 10:40:36
amazon
amazon
Low: php
2012-08-05 14:14:00
seebug
seebug
PHP '_php_stream_scandir()'ηΌε²εΊζΊ’εΊζΌζ΄
2012-07-25 00:00:00
slackware
slackware
[slackware-security] php
2012-07-22 23:48:31
freebsd
freebsd
php -- potential overflow in _php_stream_scandir
2012-07-19 00:00:00
prion
prion
Buffer overflow
2012-07-20 10:40:00
cvelist
cvelist
CVE-2012-2688
2012-07-20 10:00:00
suse
suse
Security update for php5 (important)
2012-08-24 14:08:28
Security update for PHP5 (important)
2012-08-24 09:08:27
Security update for PHP5 (important)
2013-08-16 21:04:11
securityvulns
securityvulns
[ MDVSA-2012:108 ] php
2012-07-30 00:00:00
PHP security vulnerabilities
2012-07-30 00:00:00
debian
debian
[SECURITY] [DSA 2527-1] php5 security update
2012-08-13 18:16:56
osv
osv
php5 - several
2012-08-13 00:00:00
centos
centos
php security update
2013-02-27 19:37:21
php security update
2013-12-11 09:34:01
php53 security update
2013-10-07 12:42:03
redhat
redhat
(RHSA-2013:0514) Moderate: php security, bug fix and enhancement update
2013-02-21 00:00:00
(RHSA-2013:1814) Critical: php security update
2013-12-11 00:00:00
(RHSA-2013:1307) Moderate: php53 security, bug fix and enhancement update
2013-09-30 16:52:28
oraclelinux
oraclelinux
php security, bug fix and enhancement update
2013-02-27 00:00:00
php security update
2013-12-10 00:00:00
php53 security, bug fix and enhancement update
2013-10-02 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2012-09-17 00:00:00
hackerone
hackerone
Yahoo!: Out of date version
2014-03-30 08:47:50
gentoo
gentoo
PHP: Multiple vulnerabilities
2012-09-24 00:00:00