VDB
BDU%3A2022-02620
BDU%3A2022-02620
PUBLISHED
CVSS 10 CRITICAL
Уязвимость функции _php_stream_scandir интерпретатора языка программирования PHP, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Canonical Ltd., Novell Inc., Сообщество свободного программного обеспечения, PHP Group | Red Hat Enterprise Linux, Ubuntu, OpenSUSE Leap, Debian GNU/Linux, PHP |
Timeline
- Apr 27, 2022 CVE Published
- Mar 21, 2026 Distribution Patch
- Mar 21, 2026 Distribution Patch
References
- http://www.php.net/ChangeLog-5.php url
- http://www.debian.org/security/2012/dsa-2527 url
- https://hermes.opensuse.org/messages/15376003 url
- http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00022.html url
- http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00021.html url
- http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html url
- http://support.apple.com/kb/HT5501 url
- http://www.ubuntu.com/usn/USN-1569-1 url
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:108 url
- http://rhn.redhat.com/errata/RHSA-2013-1307.html url
- http://secunia.com/advisories/55078 url
- http://www.securityfocus.com/bid/54638 url
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77155 url
- http://www.securitytracker.com/id?1027287 url
- https://www.php.net/ChangeLog-5.php advisory
- https://www.suse.com/security/cve/CVE-2012-2688 advisory
- https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2688.xml advisory
- https://ubuntu.com/security/CVE-2012-2688 advisory
- https://security-tracker.debian.org/tracker/CVE-2012-2688 advisory