CVE-2011-1471 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2011-1471 Interim 1 14 2023-12-08T03:01:51Z current 2021-05-30T12:57:03Z 2023-12-08T03:01:51Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2011-1471 Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive file that triggers errors in zip_fread function calls. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP2 apache2-mod_php5-5.2.14-0.7.24.1 php5-5.2.14-0.7.24.1 php5-bcmath-5.2.14-0.7.24.1 php5-bz2-5.2.14-0.7.24.1 php5-calendar-5.2.14-0.7.24.1 php5-ctype-5.2.14-0.7.24.1 php5-curl-5.2.14-0.7.24.1 php5-dba-5.2.14-0.7.24.1 php5-dbase-5.2.14-0.7.24.1 php5-dom-5.2.14-0.7.24.1 php5-exif-5.2.14-0.7.24.1 php5-fastcgi-5.2.14-0.7.24.1 php5-ftp-5.2.14-0.7.24.1 php5-gd-5.2.14-0.7.24.1 php5-gettext-5.2.14-0.7.24.1 php5-gmp-5.2.14-0.7.24.1 php5-hash-5.2.14-0.7.24.1 php5-iconv-5.2.14-0.7.24.1 php5-json-5.2.14-0.7.24.1 php5-ldap-5.2.14-0.7.24.1 php5-mbstring-5.2.14-0.7.24.1 php5-mcrypt-5.2.14-0.7.24.1 php5-mysql-5.2.14-0.7.24.1 php5-odbc-5.2.14-0.7.24.1 php5-openssl-5.2.14-0.7.24.1 php5-pcntl-5.2.14-0.7.24.1 php5-pdo-5.2.14-0.7.24.1 php5-pear-5.2.14-0.7.24.1 php5-pgsql-5.2.14-0.7.24.1 php5-pspell-5.2.14-0.7.24.1 php5-shmop-5.2.14-0.7.24.1 php5-snmp-5.2.14-0.7.24.1 php5-soap-5.2.14-0.7.24.1 php5-suhosin-5.2.14-0.7.24.1 php5-sysvmsg-5.2.14-0.7.24.1 php5-sysvsem-5.2.14-0.7.24.1 php5-sysvshm-5.2.14-0.7.24.1 php5-tokenizer-5.2.14-0.7.24.1 php5-wddx-5.2.14-0.7.24.1 php5-xmlreader-5.2.14-0.7.24.1 php5-xmlrpc-5.2.14-0.7.24.1 php5-xmlwriter-5.2.14-0.7.24.1 php5-xsl-5.2.14-0.7.24.1 php5-zip-5.2.14-0.7.24.1 php5-zlib-5.2.14-0.7.24.1 apache2-mod_php5-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-bcmath-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-bz2-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-calendar-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-ctype-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-curl-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-dba-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-dbase-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-dom-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-exif-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-fastcgi-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-ftp-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-gd-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-gettext-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-gmp-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-hash-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-iconv-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-json-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-ldap-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-mbstring-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-mcrypt-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-mysql-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-odbc-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-openssl-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-pcntl-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-pdo-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-pear-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-pgsql-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-pspell-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-shmop-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-snmp-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-soap-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-suhosin-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-sysvmsg-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-sysvsem-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-sysvshm-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-tokenizer-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-wddx-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-xmlreader-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-xmlrpc-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-xmlwriter-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-xsl-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-zip-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA php5-zlib-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA apache2-mod_php5-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-bcmath-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-bz2-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-calendar-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-ctype-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-curl-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-dba-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-dbase-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-dom-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-exif-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-fastcgi-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-ftp-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-gd-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-gettext-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-gmp-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-hash-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-iconv-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-json-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-ldap-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-mbstring-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-mcrypt-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-mysql-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-odbc-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-openssl-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-pcntl-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-pdo-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-pear-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-pgsql-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-pspell-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-shmop-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-snmp-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-soap-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-suhosin-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-sysvmsg-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-sysvsem-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-sysvshm-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-tokenizer-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-wddx-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-xmlreader-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-xmlrpc-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-xmlwriter-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-xsl-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-zip-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 php5-zlib-5.2.14-0.7.24.1 as a component of SUSE Linux Enterprise Server 11 SP2 Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive file that triggers errors in zip_fread function calls. CVE-2011-1471 SUSE Linux Enterprise Server 11 SP1-TERADATA:apache2-mod_php5-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-bcmath-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-bz2-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-calendar-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-ctype-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-curl-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-dba-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-dbase-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-dom-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-exif-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-fastcgi-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-ftp-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-gd-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-gettext-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-gmp-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-hash-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-iconv-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-json-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-ldap-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-mbstring-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-mcrypt-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-mysql-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-odbc-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-openssl-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-pcntl-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-pdo-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-pear-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-pgsql-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-pspell-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-shmop-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-snmp-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-soap-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-suhosin-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-sysvmsg-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-sysvsem-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-sysvshm-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-tokenizer-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-wddx-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-xmlreader-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-xmlrpc-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-xmlwriter-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-xsl-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-zip-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:php5-zlib-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:apache2-mod_php5-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-bcmath-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-bz2-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-calendar-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-ctype-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-curl-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-dba-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-dbase-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-dom-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-exif-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-fastcgi-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-ftp-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-gd-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-gettext-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-gmp-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-hash-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-iconv-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-json-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-ldap-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-mbstring-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-mcrypt-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-mysql-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-odbc-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-openssl-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-pcntl-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-pdo-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-pear-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-pgsql-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-pspell-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-shmop-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-snmp-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-soap-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-suhosin-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-sysvmsg-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-sysvsem-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-sysvshm-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-tokenizer-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-wddx-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-xmlreader-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-xmlrpc-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-xmlwriter-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-xsl-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-zip-5.2.14-0.7.24.1 SUSE Linux Enterprise Server 11 SP2:php5-zlib-5.2.14-0.7.24.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P