CVE-2012-2329: Buffer overflow in the apache_request_headers function in sapi/cgi/cgi_main.c in PHP 5.4.x before 5.4.3 all...

Security readout for executives and security teams

This is an old PHP denial-of-service flaw. A specially long HTTP request header can crash applications using affected PHP 5.4 CGI code. The business risk is service disruption, not documented data theft or code execution in the provided sources. Exposure is most likely on legacy systems running PHP 5.4.0 through 5.4.2 in CGI deployments, especially where applications call apache_request_headers. Current supported PHP versions should not be affected by this specific issue. Treat this as a legacy exposure cleanup item unless affected PHP 5.4 CGI systems are internet-facing or business-critical. Prioritize replacement or patching because unsupported runtimes usually carry broader accumulated risk. Mitigation focus: Upgrade affected PHP 5.4.x installations to PHP 5.4.3 or later.; Prefer a currently supported PHP branch where possible.; Check vendor advisories for backported fixes in distribution packages..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.