Description

Buffer overflow in the apache_request_headers function in sapi/cgi/cgi_main.c in PHP 5.4.x before 5.4.3 allows remote attackers to cause a denial of service (application crash) via a long string in the header of an HTTP request.

Remediation

References

CVE-2012-2329

Related Vulnerabilities

MySQL CVE-2016-5609 Vulnerability (CVE-2016-5609)

Drupal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-10910)

PHP Address Book Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2903)

Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-35614)

WordPress Plugin Smash Balloon Social Post Feed Unspecified Vulnerability (2.4.2)

Severity

Medium

Classification

CVE-2012-2329 CWE-119

Tags

Missing Update Known Vulnerabilities