CVE-2011-1938: Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5....

Security readout for executives and security teams

CVE-2011-1938 affects old PHP 5.3.3 through 5.3.6 builds. A long UNIX socket pathname passed into PHP's socket_connect function can overflow stack memory. In the right application context, this could let an attacker run code, but exposure depends on whether untrusted input can reach that function. Most likely exposure is legacy PHP 5.3.3 to 5.3.6 on systems using the sockets extension with application paths reaching UNIX socket connections. Modern supported PHP versions should not be assumed affected from this bundle. Treat this as a legacy-platform remediation item with high impact if affected code paths exist. Prioritize internet-facing or multi-tenant systems still running PHP 5.3.3 through 5.3.6, then retire or upgrade unsupported PHP stacks. Mitigation focus: Inventory PHP runtimes and identify any PHP 5.3.3 through 5.3.6 installations.; Upgrade affected PHP builds using vendor-supported packages or PHP releases beyond the affected range.; Review Debian, Red Hat, Mandriva, Apple, and HP advisories for platform-specific fixes..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.