Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2014-4670

UNKNOWN
Published 2014-07-10T10:00:00
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2014-4670. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

Use-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact via crafted iterator usage within applications in certain web-hosting environments.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed MODERATE

GHSA-fc44-mphx-vpc6

Advisory Details

Use-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact via crafted iterator usage within applications in certain web-hosting environments.

CVSS Scoring

CVSS Score

5.0

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2014-4670
WEB https://bugs.php.net/bug.php?id=67538
WEB https://support.apple.com/HT204659
WEB http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
WEB http://lists.opensuse.org/opensuse-updates/2014-07/msg00035.html
WEB http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html
WEB http://rhn.redhat.com/errata/RHSA-2014-1326.html
WEB http://rhn.redhat.com/errata/RHSA-2014-1327.html
WEB http://rhn.redhat.com/errata/RHSA-2014-1765.html
WEB http://rhn.redhat.com/errata/RHSA-2014-1766.html
WEB http://secunia.com/advisories/54553
WEB http://secunia.com/advisories/59831
WEB http://secunia.com/advisories/60696
WEB http://www-01.ibm.com/support/docview.wss?uid=swg21683486
WEB http://www.debian.org/security/2014/dsa-3008
WEB http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html

Advisory provided by GitHub Security Advisory Database. Published: May 17, 2022, Modified: May 17, 2022

References

https://support.apple.com/HT204659
http://www-01.ibm.com/support/docview.wss?uid=swg21683486
https://bugs.php.net/bug.php?id=67538
http://secunia.com/advisories/54553
http://rhn.redhat.com/errata/RHSA-2014-1766.html
http://rhn.redhat.com/errata/RHSA-2014-1326.html
http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
http://lists.opensuse.org/opensuse-updates/2014-07/msg00035.html
http://www.debian.org/security/2014/dsa-3008
http://rhn.redhat.com/errata/RHSA-2014-1327.html
http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
http://rhn.redhat.com/errata/RHSA-2014-1765.html
http://secunia.com/advisories/60696
http://secunia.com/advisories/59831
http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html

HackerOne Reports

PHP 5.4.45 is Outdated and Full of Preformance Interupting Arbitrary Code Execution Bugs None
sondash128
Gratipay
Violation of Secure Design Principles
View Report
Published: 2014-07-10T10:00:00
Last Modified: 2024-08-06T11:27:36.176Z
Copied to clipboard!