CVE-2014-4670

Use-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact via crafted iterator usage within applications in certain web-hosting environments.

Affected Software

Name	Vendor	Start Version	End Version
Php	Php	*	5.5.14 (including)
Php	Php	5.5.0 (including)	5.5.0 (including)
Php	Php	5.5.0-alpha1 (including)	5.5.0-alpha1 (including)
Php	Php	5.5.0-alpha2 (including)	5.5.0-alpha2 (including)
Php	Php	5.5.0-alpha3 (including)	5.5.0-alpha3 (including)
Php	Php	5.5.0-alpha4 (including)	5.5.0-alpha4 (including)
Php	Php	5.5.0-alpha5 (including)	5.5.0-alpha5 (including)
Php	Php	5.5.0-alpha6 (including)	5.5.0-alpha6 (including)
Php	Php	5.5.0-beta1 (including)	5.5.0-beta1 (including)
Php	Php	5.5.0-beta2 (including)	5.5.0-beta2 (including)
Php	Php	5.5.0-beta3 (including)	5.5.0-beta3 (including)
Php	Php	5.5.0-beta4 (including)	5.5.0-beta4 (including)
Php	Php	5.5.0-rc1 (including)	5.5.0-rc1 (including)
Php	Php	5.5.0-rc2 (including)	5.5.0-rc2 (including)
Php	Php	5.5.1 (including)	5.5.1 (including)
Php	Php	5.5.2 (including)	5.5.2 (including)
Php	Php	5.5.3 (including)	5.5.3 (including)
Php	Php	5.5.4 (including)	5.5.4 (including)
Php	Php	5.5.5 (including)	5.5.5 (including)
Php	Php	5.5.6 (including)	5.5.6 (including)
Php	Php	5.5.7 (including)	5.5.7 (including)
Php	Php	5.5.8 (including)	5.5.8 (including)
Php	Php	5.5.9 (including)	5.5.9 (including)
Php	Php	5.5.10 (including)	5.5.10 (including)
Php	Php	5.5.11 (including)	5.5.11 (including)
Php	Php	5.5.12 (including)	5.5.12 (including)
Php	Php	5.5.13 (including)	5.5.13 (including)
Red Hat Enterprise Linux 5	RedHat	php53-0:5.3.3-24.el5	*
Red Hat Enterprise Linux 6	RedHat	php-0:5.3.3-27.el6_5.2	*
Red Hat Enterprise Linux 7	RedHat	php-0:5.4.16-23.el7_0.1	*
Red Hat Software Collections 1 for Red Hat Enterprise Linux 6	RedHat	php54-php-0:5.4.16-22.el6	*
Red Hat Software Collections 1 for Red Hat Enterprise Linux 6	RedHat	php55-php-0:5.5.6-13.el6	*
Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.4 EUS	RedHat	php54-php-0:5.4.16-22.el6	*
Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.4 EUS	RedHat	php55-php-0:5.5.6-13.el6	*
Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.5 EUS	RedHat	php54-php-0:5.4.16-22.el6	*
Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.5 EUS	RedHat	php55-php-0:5.5.6-13.el6	*
Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.6 EUS	RedHat	php54-php-0:5.4.16-22.el6	*
Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.6 EUS	RedHat	php55-php-0:5.5.6-13.el6	*
Red Hat Software Collections 1 for Red Hat Enterprise Linux 7	RedHat	php54-php-0:5.4.16-22.el7	*
Red Hat Software Collections 1 for Red Hat Enterprise Linux 7	RedHat	php55-php-0:5.5.6-13.el7	*
Php5	Ubuntu	devel	*
Php5	Ubuntu	esm-infra-legacy/trusty	*
Php5	Ubuntu	lucid	*
Php5	Ubuntu	precise	*
Php5	Ubuntu	saucy	*
Php5	Ubuntu	trusty	*
Php5	Ubuntu	trusty/esm	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2014-4670
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References