# CVEs published 2011-03-20

15 CVEs were published on March 20, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-0284](https://cve.now/CVE-2011-0284.md): Double free vulnerability in the prepare\_error\_as function in do\_as\_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) (no CVSS)
- [CVE-2011-0421](https://cve.now/CVE-2011-0421.md): The \_zip\_name\_locate function in zip\_name\_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL\_UNCHAN (no CVSS)
- [CVE-2011-0708](https://cve.now/CVE-2011-0708.md): exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a de (no CVSS)
- [CVE-2011-1024](https://cve.now/CVE-2011-1024.md): chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicy\_forward\_updates (ak (no CVSS)
- [CVE-2011-1025](https://cve.now/CVE-2011-1025.md): bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name (DN), which allows remo (no CVSS)
- [CVE-2011-1027](https://cve.now/CVE-2011-1027.md): Off-by-one error in the convert\_query\_hexchar function in html.c in cgit.cgi in cgit before 0.8.3.5 allows remote attackers to cause a denia (no CVSS)
- [CVE-2011-1081](https://cve.now/CVE-2011-1081.md): modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service (daemon crash) via a relative Disting (no CVSS)
- [CVE-2011-1464](https://cve.now/CVE-2011-1464.md): Buffer overflow in the strval function in PHP before 5.3.6, when the precision configuration option has a large value, might allow context-d (no CVSS)
- [CVE-2011-1465](https://cve.now/CVE-2011-1465.md): The SPDY implementation in net/http/http\_network\_transaction.cc in Google Chrome before 11.0.696.14 drains the bodies from SPDY responses, w (no CVSS)
- [CVE-2011-1466](https://cve.now/CVE-2011-1466.md): Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a den (no CVSS)
- [CVE-2011-1467](https://cve.now/CVE-2011-1467.md): Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt\_set\_symbol) function in the Intl extension in PHP before 5.3.6 allow (no CVSS)
- [CVE-2011-1468](https://cve.now/CVE-2011-1468.md): Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of service (memory consump (no CVSS)
- [CVE-2011-1469](https://cve.now/CVE-2011-1469.md): Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (appl (no CVSS)
- [CVE-2011-1470](https://cve.now/CVE-2011-1470.md): The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a ziparchive s (no CVSS)
- [CVE-2011-1471](https://cve.now/CVE-2011-1471.md): Integer signedness error in zip\_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of se (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-03-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.