Description
The (1) ZipArchive::addGlob and (2) ZipArchive::addPattern functions in ext/zip/php_zip.c in PHP 5.3.6 allow context-dependent attackers to cause a denial of service (application crash) via certain flags arguments, as demonstrated by (a) GLOB_ALTDIRFUNC and (b) GLOB_APPEND.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 6.0 | php5 | 5.3.3-7+squeeze8 | DSA-2408-1 |
Advisories 1
- DSA-2408-1 php5 - several Debian Security (DSA / DLA) · Mar 9, 2026
References
- [oss-security] 20110701 php ZipArchive::addGlob() crashes on invalid flags mailing-list
- https://bugs.php.net/bug.php?id=54681
- http://support.apple.com/kb/HT5130
- MDVSA-2011:165 vendor-advisory
- http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/ext/zip/php_zip.c?view=log
- APPLE-SA-2012-02-01-1 vendor-advisory
- http://svn.php.net/viewvc/?view=revision&revision=310814
- 20110819 PHP 5.3.6 ZipArchive invalid use glob(3) third-party-advisory
- 49252 vdb-entry
- [oss-security] 20110701 Re: php ZipArchive::addGlob() crashes on invalid flags mailing-list
- [oss-security] 20110701 Re: Re: php ZipArchive::addGlob() crashes on invalid flags mailing-list
- 8342 third-party-advisory
- 20110819 PHP 5.3.6 ZipArchive invalid use glob(3) mailing-list
- php-ziparchiveaddglob-dos(69320) vdb-entry