CVE Vulnerabilities

CVE-2014-4698

Published: Jul 10, 2014 | Modified: Jan 19, 2023
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
2.1 LOW
AV:L/AC:L/Au:N/C:N/I:N/A:P
RedHat/V3
Ubuntu
MEDIUM

Use-after-free vulnerability in ext/spl/spl_array.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact via crafted ArrayIterator usage within applications in certain web-hosting environments.

Affected Software

Name Vendor Start Version End Version
Php Php 5.4.0 (including) 5.4.32 (excluding)
Php Php 5.5.0 (including) 5.5.15 (excluding)
Red Hat Enterprise Linux 5 RedHat php53-0:5.3.3-24.el5 *
Red Hat Enterprise Linux 6 RedHat php-0:5.3.3-27.el6_5.2 *
Red Hat Enterprise Linux 7 RedHat php-0:5.4.16-23.el7_0.1 *
Red Hat Software Collections 1 for Red Hat Enterprise Linux 6 RedHat php54-php-0:5.4.16-22.el6 *
Red Hat Software Collections 1 for Red Hat Enterprise Linux 6 RedHat php55-php-0:5.5.6-13.el6 *
Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.4 EUS RedHat php54-php-0:5.4.16-22.el6 *
Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.4 EUS RedHat php55-php-0:5.5.6-13.el6 *
Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.5 EUS RedHat php54-php-0:5.4.16-22.el6 *
Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.5 EUS RedHat php55-php-0:5.5.6-13.el6 *
Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.6 EUS RedHat php54-php-0:5.4.16-22.el6 *
Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.6 EUS RedHat php55-php-0:5.5.6-13.el6 *
Red Hat Software Collections 1 for Red Hat Enterprise Linux 7 RedHat php54-php-0:5.4.16-22.el7 *
Red Hat Software Collections 1 for Red Hat Enterprise Linux 7 RedHat php55-php-0:5.5.6-13.el7 *
Php5 Ubuntu devel *
Php5 Ubuntu lucid *
Php5 Ubuntu precise *
Php5 Ubuntu saucy *
Php5 Ubuntu trusty *

References