# CVEs published 2011-03-20

15 CVEs were published on March 20, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-0284](https://cve.now/CVE-2011-0284.md): Double free vulnerability in the prepare\_error\_as function in do\_as\_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka… (no CVSS)
- [CVE-2011-0421](https://cve.now/CVE-2011-0421.md): The \_zip\_name\_locate function in zip\_name\_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a… (no CVSS)
- [CVE-2011-0708](https://cve.now/CVE-2011-0708.md): exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a… (no CVSS)
- [CVE-2011-1024](https://cve.now/CVE-2011-1024.md): chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicy\_forward\_updates… (no CVSS)
- [CVE-2011-1025](https://cve.now/CVE-2011-1025.md): bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name (DN), which allows… (no CVSS)
- [CVE-2011-1027](https://cve.now/CVE-2011-1027.md): Off-by-one error in the convert\_query\_hexchar function in html.c in cgit.cgi in cgit before 0.8.3.5 allows remote attackers to cause a… (no CVSS)
- [CVE-2011-1081](https://cve.now/CVE-2011-1081.md): modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service (daemon crash) via a relative… (no CVSS)
- [CVE-2011-1464](https://cve.now/CVE-2011-1464.md): Buffer overflow in the strval function in PHP before 5.3.6, when the precision configuration option has a large value, might allow… (no CVSS)
- [CVE-2011-1465](https://cve.now/CVE-2011-1465.md): The SPDY implementation in net/http/http\_network\_transaction.cc in Google Chrome before 11.0.696.14 drains the bodies from SPDY responses… (no CVSS)
- [CVE-2011-1466](https://cve.now/CVE-2011-1466.md): Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a… (no CVSS)
- [CVE-2011-1467](https://cve.now/CVE-2011-1467.md): Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt\_set\_symbol) function in the Intl extension in PHP before 5.3.6… (no CVSS)
- [CVE-2011-1468](https://cve.now/CVE-2011-1468.md): Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of service (memory… (no CVSS)
- [CVE-2011-1469](https://cve.now/CVE-2011-1469.md): Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service… (no CVSS)
- [CVE-2011-1470](https://cve.now/CVE-2011-1470.md): The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a ziparchive… (no CVSS)
- [CVE-2011-1471](https://cve.now/CVE-2011-1471.md): Integer signedness error in zip\_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2011-03-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.