The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-dependent attackers to cause a denial of service (NULL pointer dereference) via an empty ZIP archive that is processed with a (1) locateName or (2) statName operation.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Apache | — | Apply OS X security update 2011-006Upgrade macOS to the latest version | Aug 28, 2015 | Mar 19, 2011 |
| Apple Osx Php | — | Apply OS X security update 2011-006 | Dec 16, 2011 | Mar 19, 2011 |
| Debian | — | Upgrade libzip | Jul 30, 2024 | Mar 20, 2011 |
| Freebsd | — | Upgrade php5-zip | Dec 10, 2025 | Mar 25, 2011 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Mar 19, 2011 |
| Php | — | Upgrade to PHP version 5.3.6 | Jul 17, 2012 | Mar 20, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 30, 2011 |
| Suse | — | Upgrade php5-pspellUpgrade php5-dbaUpgrade php7-xmlreaderUpgrade php8-xmlwriterUpgrade php53-pspellUpgrade php5-mysqlUpgrade php8-bcmathUpgrade php8-enchantUpgrade php5-odbcUpgrade php8-tokenizerUpgrade php8-ffiUpgrade php8-develUpgrade php5-curlUpgrade libzip-toolsUpgrade php8-socketsUpgrade php72-develUpgrade php8-mbstringUpgrade php5-snmpUpgrade php5-zlibUpgrade php5-sysvshmUpgrade php8-pdoUpgrade libzip-develUpgrade php53-readlineUpgrade php53-sqliteUpgrade php53-bcmathUpgrade php8-sysvmsgUpgrade php53-intlUpgrade php5-pgsqlUpgrade php53-domUpgrade php7-ctypeUpgrade php53-ctypeUpgrade php53-opensslUpgrade php8-zipUpgrade php8-xslUpgrade php8-readlineUpgrade php53-pearUpgrade php5-soapUpgrade php53-pcntlUpgrade php8-mysqlUpgrade php7-mysqlUpgrade php53-exifUpgrade libzip1Upgrade php53-xslUpgrade php8-dbaUpgrade php53-dbaUpgrade php8-bz2Upgrade php5-tokenizerUpgrade php5-ldapUpgrade php53-pdoUpgrade php8-cliUpgrade php8-ldapUpgrade php53-snmpUpgrade php53-xmlwriterUpgrade php5-pearUpgrade php5-pcntlUpgrade php5-gdUpgrade php5-bz2Upgrade php8-ctypeUpgrade php53-gmpUpgrade php53-zlibUpgrade php5-mbstringUpgrade php53-xmlrpcUpgrade php53-gdUpgrade php53-fileinfoUpgrade php5-dbaseUpgrade php53-sysvshmUpgrade php8-intlUpgrade php8-calendarUpgrade php8-opcacheUpgrade php53-tokenizerUpgrade php53Upgrade php5-develUpgrade php53-jsonUpgrade libzip2Upgrade php8-gdUpgrade php53-fastcgiUpgrade php8-soapUpgrade php8-zlibUpgrade php5-suhosinUpgrade php5-shmopUpgrade php8-fpm-apacheUpgrade php5-calendarUpgrade php53-posixUpgrade php8-opensslUpgrade php8Upgrade php8-sqliteUpgrade php53-zipUpgrade php8-pgsqlUpgrade php53-odbcUpgrade apache2-mod_php5Upgrade php8-sysvshmUpgrade php8-embedUpgrade php5-xmlreaderUpgrade php5-jsonUpgrade php53-xmlreaderUpgrade php5-sysvmsgUpgrade php53-ftpUpgrade php8-fastcgiUpgrade php53-gettextUpgrade php5-sysvsemUpgrade php53-socketsUpgrade php5Upgrade php8-sysvsemUpgrade php5-pdoUpgrade php53-mysqlUpgrade php8-odbcUpgrade php5-xslUpgrade php8-pcntlUpgrade php8-ftpUpgrade php8-sodiumUpgrade php53-soapUpgrade apache2-mod_php53Upgrade php53-suhosinUpgrade php53-sysvmsgUpgrade php8-curlUpgrade php7-develUpgrade php5-hashUpgrade php53-mbstringUpgrade php7-jsonUpgrade php8-gettextUpgrade php53-sysvsemUpgrade php5-gettextUpgrade php53-wddxUpgrade php7-domUpgrade php53-imapUpgrade php5-zipUpgrade php53-shmopUpgrade php53-bz2Upgrade php5-ctypeUpgrade php53-mcryptUpgrade php5-exifUpgrade php5-domUpgrade php5-mcryptUpgrade php5-fastcgiUpgrade php5-iconvUpgrade php8-fileinfoUpgrade php7Upgrade php5-wddxUpgrade php8-shmopUpgrade apache2-mod_php7Upgrade php5-bcmathUpgrade php53-develUpgrade php53-ldapUpgrade php53-curlUpgrade php53-tidyUpgrade php7-pgsqlUpgrade php8-tidyUpgrade php53-iconvUpgrade php8-fpmUpgrade php8-xmlreaderUpgrade php5-xmlrpcUpgrade php5-opensslUpgrade php8-gmpUpgrade php7-iconvUpgrade php8-posixUpgrade libzip5Upgrade php53-calendarUpgrade php7-pdoUpgrade apache2-mod_php8Upgrade php7-xmlwriterUpgrade php5-xmlwriterUpgrade php8-pharUpgrade php8-domUpgrade php7-sqliteUpgrade php7-tokenizerUpgrade php5-ftpUpgrade php8-iconvUpgrade php53-pgsqlUpgrade php8-snmpUpgrade php8-exifUpgrade php5-gmp | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade php5-cliUpgrade php-pearUpgrade php5-devUpgrade php5-cgiUpgrade libapache2-mod-php5Upgrade php5-intlUpgrade php5Upgrade php5-curlUpgrade php5-commonUpgrade php5-gd | Nov 8, 2024 | Mar 20, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub