Every CVE Search/ Get API key

CVE-2011-0421

The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does...

4.3 MediumPublic exploitFix available

The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-dependent attackers to cause a denial of service (NULL pointer dereference) via an empty ZIP archive that is processed with a (1) locateName or (2) statName operation.

Exploit likelihood

13.5%Up 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-dependent attackers to cause a denial of service (NULL pointer dereference) via an empty ZIP archive that is processed with a (1) locateName or (2) statName operation.

Record
CVE-2011-0421
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-dependent attackers to cause a denial of service (NULL pointer dereference) via an empty ZIP archive that is processed with a (1) locateName or (2) statName operation.

Record
CVE-2011-0421
Updated
2026-11-02
EUVDEUVD-2011-0447 No score

The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-dependent attackers to cause a denial of service (NULL pointer dereference) via an empty ZIP archive that is processed with a (1) locateName or (2) statName operation.

Record
EUVD-2011-0447
Updated
2026-11-03
GitHub AdvisoriesGHSA-h3v6-hj58-cx74 No score

The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does...

The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-dependent attackers to cause a denial of service (NULL pointer dereference) via an empty ZIP archive that is processed with a (1) locateName or (2) statName operation.

Record
GHSA-h3v6-hj58-cx74
Updated
2026-11-02
OSV No score

The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-dependent attackers to cause a denial of service (NULL pointer dereference) via an empty ZIP archive that is processed with a (1) locateName or (2) statName operation.

Record
CVE-2011-0421
Updated
2026-11-02
OSVDEBIAN-CVE-2011-0421 No score

The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-dependent attackers to cause a denial of service (NULL pointer dereference) via an empty ZIP archive that is processed with a (1) locateName or (2) statName operation.

Record
DEBIAN-CVE-2011-0421
Updated
2026-11-02
Show 4 moreShow less
OSVopenSUSE-SU-2024:10113-1 No score

libzip-devel-1.1.3-1.4 on GA media

These are all security issues fixed in the libzip-devel-1.1.3-1.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10113-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10290-1 No score

apache2-mod_php7-7.0.14-1.4 on GA media

These are all security issues fixed in the apache2-mod_php7-7.0.14-1.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10290-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10344-1 No score

apache2-mod_php5-5.6.28-1.1 on GA media

These are all security issues fixed in the apache2-mod_php5-5.6.28-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10344-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11169-1 No score

php8-8.0.11-1.1 on GA media

These are all security issues fixed in the php8-8.0.11-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11169-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libzip
Debian:12
 before 0.10-1
0.10-1
libzip
Debian:13
 before 0.10-1
0.10-1
libzip
Debian:14
 before 0.10-1
0.10-1
php5
Debian:5.0
From an advisory covering 8 CVEs
 before 5.2.6.dfsg.1-1+lenny12, plus listed versions
5.2.6.dfsg.1-1+lenny105.2.6.dfsg.1-1+lenny115.2.6.dfsg.1-1+lenny25.2.6.dfsg.1-1+lenny35.2.6.dfsg.1-1+lenny45.2.6.dfsg.1-1+lenny65.2.6.dfsg.1-1+lenny85.2.6.dfsg.1-1+lenny9
5.2.6.dfsg.1-1+lenny12
php5
Debian:6.0
From an advisory covering 8 CVEs
 before 5.3.3-7+squeeze3, plus listed versions
5.3.3-75.3.3-7+squeeze15.3.3-7+squeeze2
5.3.3-7+squeeze3
libzip
openSUSE:Tumbleweed
From an advisory covering 4 CVEs
 before 1.1.3-1.4
1.1.3-1.4
php7
openSUSE:Tumbleweed
From an advisory covering 70 CVEs
 before 7.0.14-1.4
7.0.14-1.4
php5
openSUSE:Tumbleweed
From an advisory covering 71 CVEs
 before 5.6.28-1.1
5.6.28-1.1
php8
openSUSE:Tumbleweed
From an advisory covering 97 CVEs
 before 8.0.11-1.1
8.0.11-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBPHP 5.3.5 libzip 0.9.3 - _zip_name_locate Null Pointer Dereference2011-03-18

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-0421 is a medium vulnerability (CVSS 4.3) in Php, published March 20, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 13.5%, the 96th percentile. Fixed in libzip 0.10-1.

References

Show 141 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open