CVE-2014-4670
Published: 4 July 2014
Use-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact via crafted iterator usage within applications in certain web-hosting environments.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
php5 Launchpad, Ubuntu, Debian |
lucid |
Released
(5.3.2-1ubuntu4.26)
|
| precise |
Released
(5.3.10-1ubuntu3.13)
|
|
| saucy |
Released
(5.5.3+dfsg-1ubuntu2.6)
|
|
| trusty |
Released
(5.5.9+dfsg-1ubuntu4.3)
|
|
| upstream |
Needs triage
|
|
|
Patches: upstream: http://git.php.net/?p=php-src.git;a=commit;h=df78c48354f376cf419d7a97f88ca07d572f00fb |
||