CVE-2011-0421

Publication date 19 March 2011

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-dependent attackers to cause a denial of service (NULL pointer dereference) via an empty ZIP archive that is processed with a (1) locateName or (2) statName operation.

Read the notes from the security team

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
libzip 13.04 raring
Not affected
12.10 quantal
Not affected
12.04 LTS precise
Not affected
11.10 oneiric Ignored end of life
11.04 natty Ignored end of life
10.10 maverick Ignored end of life
10.04 LTS lucid Ignored end of life
9.10 karmic Ignored end of life
8.04 LTS hardy Ignored end of life
6.06 LTS dapper Not in release
php5 13.04 raring
Not affected
12.10 quantal
Not affected
12.04 LTS precise
Not affected
11.10 oneiric
Not affected
11.04 natty
Fixed 5.3.5-1ubuntu7.1
10.10 maverick
Fixed 5.3.3-1ubuntu9.4
10.04 LTS lucid
Fixed 5.3.2-1ubuntu4.8
9.10 karmic
Fixed 5.2.10.dfsg.1-2ubuntu6.9
8.04 LTS hardy
Fixed 5.2.4-2ubuntu5.15
6.06 LTS dapper
Not affected

Notes

sbeattie

php 5.1 in dapper did not include the zip library

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
libzip
php5

References

Related Ubuntu Security Notices (USN)

Other references