← Back

CVE-2014-4670

nvd nist
Published: Jul 10, 2014Modified: May 6, 2026

JSON object

Loading...
4.6
Vector
AV:L/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 3.9 / Impact: 6.4
Source: NVD

Description

Use-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact via crafted iterator usage within applications in certain web-hosting environments.

Affected (27)

Products: Php: Php
1 product
Php
Configuration A
27 vulnerable
Vulnerable SoftwareAffected Versions
Php
Up to 5.5.14
Version 5.5.0
Version 5.5.0 alpha1
Version 5.5.0 alpha2
Version 5.5.0 alpha3
Version 5.5.0 alpha4
Version 5.5.0 alpha5
Version 5.5.0 alpha6
Version 5.5.0 beta1
Version 5.5.0 beta2
Version 5.5.0 beta3
Version 5.5.0 beta4
Version 5.5.0 rc1
Version 5.5.0 rc2
Version 5.5.10
Version 5.5.11
Version 5.5.12
Version 5.5.13
Version 5.5.1
Version 5.5.2
Version 5.5.3
Version 5.5.4
Version 5.5.5
Version 5.5.6
Version 5.5.7
Version 5.5.8
Version 5.5.9

References (30)

Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.