CVE-2012-2336 [Medium] | Input Validation Bypass in Php

sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to cause a denial of service (resource consumption) by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'T' case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.

EDB-ID	Source	Kind	Published	Link
29316	exploit_db	edb	2013-10-31	Exploit-DB ↗
29290	exploit_db	edb	2013-10-29	Exploit-DB ↗
18836	exploit_db	edb	2012-05-05	Exploit-DB ↗
18834	exploit_db	edb	2012-05-04	Exploit-DB ↗

EDB-ID

Source

Kind

Published

Link

29316

exploit_db

edb

2013-10-31

Exploit-DB ↗

29290

exploit_db

edb

2013-10-29

Exploit-DB ↗

18836

exploit_db

edb

2012-05-05

Exploit-DB ↗

18834

exploit_db

edb

2012-05-04

Exploit-DB ↗

#	Date	Old EPSS score	New EPSS score	Delta (New - Old)
1	2026-04-02	52.91%	47.33%	-5.58%
2	2026-03-04	51.78%	52.91%	+1.13%
3	2026-03-01	—	51.78%	—

Date

Old EPSS score

New EPSS score

Delta (New - Old)

2026-04-02

52.91%

47.33%

-5.58%

2026-03-04

51.78%

52.91%

+1.13%

2026-03-01

—

51.78%

—

Base score	Version	Severity	Vector	Exploitability	Impact	Score source
5.0	2.0	MEDIUM	`AV:N/AC:L/Au:N/C:N/I:N/A:P` Click to expand Access vector (AV:N) Can be exploited remotely over network reachability. Access complexity (AC:L) Exploitation conditions are straightforward and predictable. Authentication (AU:N) No authentication is required. Confidentiality impact (C:N) No confidentiality impact. Integrity impact (I:N) No integrity impact. Availability impact (A:P) Partial availability impact.	10.0	2.9	[email protected]

Base score

Version

Severity

Vector

Exploitability

Impact

Score source

5.0

2.0

MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P Click to expand

Access vector (AV:N): Can be exploited remotely over network reachability.
Access complexity (AC:L): Exploitation conditions are straightforward and predictable.
Authentication (AU:N): No authentication is required.
Confidentiality impact (C:N): No confidentiality impact.
Integrity impact (I:N): No integrity impact.
Availability impact (A:P): Partial availability impact.

10.0

2.9

[email protected]

OS Trackers for CVE-2012-2336

vendor	priority	summary	link
`gentoo`	high	CVE-2012-2336: 1 GLSA(s) (201209-03), 1 atom(s) (dev-lang/php); latest impact high.	https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2012-2336
`redhat`	medium	—	https://access.redhat.com/security/cve/CVE-2012-2336
`suse`	medium	CVE-2012-2336 severity moderate: SUSE including 436 source package names (apache2-mod_php5-5.2.14-0.7.30.40.1, apache2-mod_php5-5.6.28-1.1, …), 481 product×package rows across 17 product lines (SUSE Linux Enterprise Module for Web and Scripting 12, SUSE Linux Enterprise Server 11 SP1-TERADATA, … (17 product lines)): Fixed 431, Known Not Affected 50.	https://www.suse.com/security/cve/CVE-2012-2336/
`ubuntu`	low	CVE-2012-2336 low priority: Ubuntu including 1 source packages (php5), 6 status rows across 6 suites (hardy, lucid, natty, oneiric, precise, upstream): released 6.	https://ubuntu.com/security/CVE-2012-2336

Affected software / configurations for CVE-2012-2336

Vendor	Product	Version	Raw CPE
php	php	<= 5.3.12	cpe:2.3:a:php:php::::::::
php	php	1.0	cpe:2.3:a:php:php:1.0:::::::*
php	php	2.0	cpe:2.3:a:php:php:2.0:::::::*
php	php	2.0b10	cpe:2.3:a:php:php:2.0b10:::::::*
php	php	3.0	cpe:2.3:a:php:php:3.0:::::::*
php	php	3.0.1	cpe:2.3:a:php:php:3.0.1:::::::*
php	php	3.0.2	cpe:2.3:a:php:php:3.0.2:::::::*
php	php	3.0.3	cpe:2.3:a:php:php:3.0.3:::::::*
php	php	3.0.4	cpe:2.3:a:php:php:3.0.4:::::::*
php	php	3.0.5	cpe:2.3:a:php:php:3.0.5:::::::*
php	php	3.0.6	cpe:2.3:a:php:php:3.0.6:::::::*
php	php	3.0.7	cpe:2.3:a:php:php:3.0.7:::::::*
php	php	3.0.8	cpe:2.3:a:php:php:3.0.8:::::::*
php	php	3.0.9	cpe:2.3:a:php:php:3.0.9:::::::*
php	php	3.0.10	cpe:2.3:a:php:php:3.0.10:::::::*
php	php	3.0.11	cpe:2.3:a:php:php:3.0.11:::::::*
php	php	3.0.12	cpe:2.3:a:php:php:3.0.12:::::::*
php	php	3.0.13	cpe:2.3:a:php:php:3.0.13:::::::*
php	php	3.0.14	cpe:2.3:a:php:php:3.0.14:::::::*
php	php	3.0.15	cpe:2.3:a:php:php:3.0.15:::::::*
php	php	3.0.16	cpe:2.3:a:php:php:3.0.16:::::::*
php	php	3.0.17	cpe:2.3:a:php:php:3.0.17:::::::*
php	php	3.0.18	cpe:2.3:a:php:php:3.0.18:::::::*
php	php	4.0	cpe:2.3:a:php:php:4.0:beta_4_patch1::::::
php	php	4.0	cpe:2.3:a:php:php:4.0:beta1::::::
php	php	4.0	cpe:2.3:a:php:php:4.0:beta2::::::
php	php	4.0	cpe:2.3:a:php:php:4.0:beta3::::::
php	php	4.0	cpe:2.3:a:php:php:4.0:beta4::::::
php	php	4.0.0	cpe:2.3:a:php:php:4.0.0:::::::*
php	php	4.0.1	cpe:2.3:a:php:php:4.0.1:::::::*
php	php	4.0.2	cpe:2.3:a:php:php:4.0.2:::::::*
php	php	4.0.3	cpe:2.3:a:php:php:4.0.3:::::::*
php	php	4.0.4	cpe:2.3:a:php:php:4.0.4:::::::*
php	php	4.0.5	cpe:2.3:a:php:php:4.0.5:::::::*
php	php	4.0.6	cpe:2.3:a:php:php:4.0.6:::::::*
php	php	4.0.7	cpe:2.3:a:php:php:4.0.7:::::::*
php	php	4.1.0	cpe:2.3:a:php:php:4.1.0:::::::*
php	php	4.1.1	cpe:2.3:a:php:php:4.1.1:::::::*
php	php	4.1.2	cpe:2.3:a:php:php:4.1.2:::::::*
php	php	4.2.0	cpe:2.3:a:php:php:4.2.0:::::::*
php	php	4.2.1	cpe:2.3:a:php:php:4.2.1:::::::*
php	php	4.2.2	cpe:2.3:a:php:php:4.2.2:::::::*
php	php	4.2.3	cpe:2.3:a:php:php:4.2.3:::::::*
php	php	4.3.0	cpe:2.3:a:php:php:4.3.0:::::::*
php	php	4.3.1	cpe:2.3:a:php:php:4.3.1:::::::*
php	php	4.3.2	cpe:2.3:a:php:php:4.3.2:::::::*
php	php	4.3.3	cpe:2.3:a:php:php:4.3.3:::::::*
php	php	4.3.4	cpe:2.3:a:php:php:4.3.4:::::::*
php	php	4.3.5	cpe:2.3:a:php:php:4.3.5:::::::*
php	php	4.3.6	cpe:2.3:a:php:php:4.3.6:::::::*
php	php	4.3.7	cpe:2.3:a:php:php:4.3.7:::::::*
php	php	4.3.8	cpe:2.3:a:php:php:4.3.8:::::::*
php	php	4.3.9	cpe:2.3:a:php:php:4.3.9:::::::*
php	php	4.3.10	cpe:2.3:a:php:php:4.3.10:::::::*
php	php	4.3.11	cpe:2.3:a:php:php:4.3.11:::::::*
php	php	4.4.0	cpe:2.3:a:php:php:4.4.0:::::::*
php	php	4.4.1	cpe:2.3:a:php:php:4.4.1:::::::*
php	php	4.4.2	cpe:2.3:a:php:php:4.4.2:::::::*
php	php	4.4.3	cpe:2.3:a:php:php:4.4.3:::::::*
php	php	4.4.4	cpe:2.3:a:php:php:4.4.4:::::::*
php	php	4.4.5	cpe:2.3:a:php:php:4.4.5:::::::*
php	php	4.4.6	cpe:2.3:a:php:php:4.4.6:::::::*
php	php	4.4.7	cpe:2.3:a:php:php:4.4.7:::::::*
php	php	4.4.8	cpe:2.3:a:php:php:4.4.8:::::::*
php	php	4.4.9	cpe:2.3:a:php:php:4.4.9:::::::*
php	php	5.0.0	cpe:2.3:a:php:php:5.0.0:::::::*
php	php	5.0.0	cpe:2.3:a:php:php:5.0.0:beta1::::::
php	php	5.0.0	cpe:2.3:a:php:php:5.0.0:beta2::::::
php	php	5.0.0	cpe:2.3:a:php:php:5.0.0:beta3::::::
php	php	5.0.0	cpe:2.3:a:php:php:5.0.0:beta4::::::
php	php	5.0.0	cpe:2.3:a:php:php:5.0.0:rc1::::::
php	php	5.0.0	cpe:2.3:a:php:php:5.0.0:rc2::::::
php	php	5.0.0	cpe:2.3:a:php:php:5.0.0:rc3::::::
php	php	5.0.1	cpe:2.3:a:php:php:5.0.1:::::::*
php	php	5.0.2	cpe:2.3:a:php:php:5.0.2:::::::*
php	php	5.0.3	cpe:2.3:a:php:php:5.0.3:::::::*
php	php	5.0.4	cpe:2.3:a:php:php:5.0.4:::::::*
php	php	5.0.5	cpe:2.3:a:php:php:5.0.5:::::::*
php	php	5.1.0	cpe:2.3:a:php:php:5.1.0:::::::*
php	php	5.1.1	cpe:2.3:a:php:php:5.1.1:::::::*

References for CVE-2012-2336

URL	Tags
http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00003.html
http://secunia.com/advisories/49014	Vendor Advisory
http://www.php.net/ChangeLog-5.php#5.4.3
http://www.php.net/archive/2012.php#id2012-05-08-1	Vendor Advisory
https://bugs.php.net/bug.php?id=61910	Vendor Advisory
https://bugs.php.net/patch-display.php?bug_id=61910&patch=CVE-2012-1823.patch&revision=1336251592&display=1
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862

URL

CVE-2012-2336

Public exploit references (Exploit-DB) for CVE-2012-2336

Exploit prediction scoring system (EPSS) score for CVE-2012-2336

Common vulnerability scoring system (CVSS) metrics for CVE-2012-2336

Weakness enumeration for CVE-2012-2336

OS Trackers for CVE-2012-2336

Affected software / configurations for CVE-2012-2336

References for CVE-2012-2336