The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-dependent attackers to cause a denial of service (NULL pointer dereference) via an empty ZIP archive that is processed with a (1) locateName or (2) statName operation.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Apache | — | Upgrade macOS to the latest versionApply OS X security update 2011-006 | Aug 28, 2015 | Mar 19, 2011 |
| Apple Osx Php | — | Apply OS X security update 2011-006 | Dec 16, 2011 | Mar 19, 2011 |
| Debian | — | Upgrade libzip | Jul 30, 2024 | Mar 20, 2011 |
| Freebsd | — | Upgrade php5-zip | Dec 10, 2025 | Mar 25, 2011 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Mar 19, 2011 |
| Php | — | Upgrade to PHP version 5.3.6 | Jul 17, 2012 | Mar 20, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 30, 2011 |
| Suse | — | Upgrade php53-zipUpgrade php8-opensslUpgrade php53-posixUpgrade php8-xmlreaderUpgrade php7-pdoUpgrade php8-sysvshmUpgrade php53-imapUpgrade php53-develUpgrade php7-iconvUpgrade apache2-mod_php7Upgrade php8-exifUpgrade php53-iconvUpgrade php8-tidyUpgrade php8-fastcgiUpgrade php53-wddxUpgrade php8-curlUpgrade php5-sysvmsgUpgrade php53-sysvsemUpgrade php8-sysvsemUpgrade libzip5Upgrade php8-odbcUpgrade php53-socketsUpgrade apache2-mod_php53Upgrade php53-pgsqlUpgrade php5-pdoUpgrade php5-exifUpgrade php5-gmpUpgrade php5-opensslUpgrade php8-sodiumUpgrade php7-tokenizerUpgrade php5-ftpUpgrade php53-ftpUpgrade php53-suhosinUpgrade php53-soapUpgrade php53-calendarUpgrade php5-ctypeUpgrade apache2-mod_php8Upgrade php53-bz2Upgrade php5-bcmathUpgrade php53-tidyUpgrade php5-xmlwriterUpgrade php5-wddxUpgrade php53-shmopUpgrade php5-domUpgrade php53-gettextUpgrade php8-embedUpgrade php7-xmlwriterUpgrade php8-gettextUpgrade php7-domUpgrade php8-fileinfoUpgrade php5-iconvUpgrade php5-sysvsemUpgrade php8-snmpUpgrade php7-sqliteUpgrade php53-curlUpgrade php53-mbstringUpgrade php8-fpmUpgrade php5-zipUpgrade php7-pgsqlUpgrade php53-ldapUpgrade php53-mysqlUpgrade php5-fastcgiUpgrade php8-gmpUpgrade php5-gettextUpgrade php5-mcryptUpgrade php7-develUpgrade php8-domUpgrade php7-jsonUpgrade php5-xmlrpcUpgrade apache2-mod_php5Upgrade php53-sysvmsgUpgrade php53-xmlreaderUpgrade php5-hashUpgrade php5-xmlreaderUpgrade php8-iconvUpgrade php8-sqliteUpgrade php8-pharUpgrade php8Upgrade php53-mcryptUpgrade php8-pgsqlUpgrade php5Upgrade php5-jsonUpgrade php7Upgrade php8-posixUpgrade php8-pcntlUpgrade php53-odbcUpgrade php8-ftpUpgrade php5-xslUpgrade php8-shmopUpgrade php7-mysqlUpgrade php5-sysvshmUpgrade php53-intlUpgrade php8-ffiUpgrade php8-sysvmsgUpgrade php5-dbaseUpgrade php5-soapUpgrade php8-pdoUpgrade php53-pcntlUpgrade php53-pearUpgrade php8-mysqlUpgrade php8-dbaUpgrade php8-cliUpgrade php8-opcacheUpgrade php53-pdoUpgrade libzip-toolsUpgrade php8-ctypeUpgrade php8-xmlwriterUpgrade php53-zlibUpgrade libzip-develUpgrade php5-pcntlUpgrade php5-shmopUpgrade libzip1Upgrade php72-develUpgrade php53-domUpgrade php5-mysqlUpgrade php5-calendarUpgrade php53-readlineUpgrade php53-sysvshmUpgrade php5-zlibUpgrade php53-ctypeUpgrade php53-snmpUpgrade php53-opensslUpgrade php8-bz2Upgrade php53-xmlwriterUpgrade php5-pearUpgrade php53-sqliteUpgrade php53-xmlrpcUpgrade php7-ctypeUpgrade php8-zlibUpgrade php53-bcmathUpgrade php8-zipUpgrade php7-xmlreaderUpgrade php5-gdUpgrade php8-ldapUpgrade php5-bz2Upgrade php8-enchantUpgrade php8-mbstringUpgrade php53-gdUpgrade php5-ldapUpgrade php5-pspellUpgrade libzip2Upgrade php5-pgsqlUpgrade php53-xslUpgrade php5-suhosinUpgrade php53-fileinfoUpgrade php8-calendarUpgrade php53Upgrade php5-develUpgrade php8-fpm-apacheUpgrade php53-pspellUpgrade php8-xslUpgrade php8-gdUpgrade php8-socketsUpgrade php53-fastcgiUpgrade php5-snmpUpgrade php5-odbcUpgrade php8-soapUpgrade php53-gmpUpgrade php5-curlUpgrade php8-readlineUpgrade php8-develUpgrade php53-dbaUpgrade php5-dbaUpgrade php5-tokenizerUpgrade php8-intlUpgrade php8-bcmathUpgrade php53-exifUpgrade php5-mbstringUpgrade php53-tokenizerUpgrade php53-jsonUpgrade php8-tokenizer | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade php5Upgrade php5-gdUpgrade php5-intlUpgrade php5-curlUpgrade php5-commonUpgrade php5-devUpgrade php5-cliUpgrade libapache2-mod-php5Upgrade php5-cgiUpgrade php-pear | Nov 8, 2024 | Mar 20, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub