CVE-2014-4698

Use-after-free vulnerability in ext/spl/spl_array.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact via crafted ArrayIterator usage within applications in certain web-hosting environments.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.6 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 42%
VendorProductVersion
phpphp
5.4.0 ≤
𝑥
< 5.4.32
phpphp
5.5.0 ≤
𝑥
< 5.5.15
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
php5
trusty
Fixed 5.5.9+dfsg-1ubuntu4.3
released
saucy
Fixed 5.5.3+dfsg-1ubuntu2.6
released
precise
Fixed 5.3.10-1ubuntu3.13
released
lucid
Fixed 5.3.2-1ubuntu4.26
released