CVE-2011-1468

php: Multiple memory leaks in the OpenSSL extension

Published Mar 20, 2011 CVSS 2.0 · 4.3 Medium EPSS 13.3% KEV · Not listed
Description
Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of service (memory consumption) via (1) plaintext data to the openssl_encrypt function or (2) ciphertext data to the openssl_decrypt function.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2408-1 php5 security update
Ubuntu USN Ubuntu USN USN-1126-1 PHP vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 10:28 PM
Reserved
Mar 19, 2011, 12:00 AM
Status
Modified
Published
Mar 20, 2011, 2:00 AM
Modified
Jun 16, 2026, 11:29 PM
Severity
Low
Public date
Feb 21, 2011, 12:00 AM