Skip to content

CVE-2011-3267

PHP before 5.3.7 does not properly implement the error_log function, which allows context...

5.0 MediumFix available

CVE-2011-3267 is a medium vulnerability (CVSS 5.0) in Php, published August 25, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.87%, the 86th percentile. Fixed in php5 5.3.3-7+squeeze8.

PHP before 5.3.7 does not properly implement the error_log function, which allows context-dependent attackers to cause a denial of service (application crash) via unspecified vectors.

Exploit likelihood

2.87%Up 1.7 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

PHP before 5.3.7 does not properly implement the error_log function, which allows context-dependent attackers to cause a denial of service (application crash) via unspecified vectors.

Record: CVE-2011-3267
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-399
Updated: 2026-11-02

CVE List No score

PHP before 5.3.7 does not properly implement the error_log function, which allows context-dependent attackers to cause a denial of service (application crash) via unspecified vectors.

Record: CVE-2011-3267
Updated: 2026-11-02

EUVDEUVD-2011-3231 No score

PHP before 5.3.7 does not properly implement the error_log function, which allows context-dependent attackers to cause a denial of service (application crash) via unspecified vectors.

Record: EUVD-2011-3231
Updated: 2026-11-03

GitHub AdvisoriesGHSA-vc8p-pj3m-8xpw No score

PHP before 5.3.7 does not properly implement the error_log function, which allows context...

PHP before 5.3.7 does not properly implement the error_log function, which allows context-dependent attackers to cause a denial of service (application crash) via unspecified vectors.

Record: GHSA-vc8p-pj3m-8xpw
Updated: 2026-11-02

Affected products

php

Affected packages

Affected packages
Package	Affected	Fixed
`php5` Debian:6.0	before 5.3.3-7+squeeze8, plus listed versions 5.3.3-75.3.3-7+squeeze15.3.3-7+squeeze25.3.3-7+squeeze35.3.3-7+squeeze55.3.3-7+squeeze65.3.3-7+squeeze7	5.3.3-7+squeeze8

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 4 moreShow less