Lucene search

[email protected]CVE-2014-4670

HistoryJul 10, 2014 - 11:06 a.m.

CVE-2014-4670

2014-07-1011:06:28

[email protected]

web.nvd.nist.gov

php

spl

vulnerability

denial of service

web hosting environments

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

65.2%

JSON

Use-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact via crafted iterator usage within applications in certain web-hosting environments.

Affected configurations

NVD

Node

phpphpRange≤5.5.14

phpphpMatch5.5.0

phpphpMatch5.5.0alpha1

phpphpMatch5.5.0alpha2

phpphpMatch5.5.0alpha3

phpphpMatch5.5.0alpha4

phpphpMatch5.5.0alpha5

phpphpMatch5.5.0alpha6

phpphpMatch5.5.0beta1

phpphpMatch5.5.0beta2

phpphpMatch5.5.0beta3

phpphpMatch5.5.0beta4

phpphpMatch5.5.0rc1

phpphpMatch5.5.0rc2

phpphpMatch5.5.1

phpphpMatch5.5.2

phpphpMatch5.5.3

phpphpMatch5.5.4

phpphpMatch5.5.5

phpphpMatch5.5.6

phpphpMatch5.5.7

phpphpMatch5.5.8

phpphpMatch5.5.9

phpphpMatch5.5.10

phpphpMatch5.5.11

phpphpMatch5.5.12

phpphpMatch5.5.13

CPENameOperatorVersion
php:phpphple5.5.14
php:phpphpeq5.5.0
php:phpphpeq5.5.1
php:phpphpeq5.5.2
php:phpphpeq5.5.3
php:phpphpeq5.5.4
php:phpphpeq5.5.5
php:phpphpeq5.5.6
php:phpphpeq5.5.7
php:phpphpeq5.5.8

CPE	Name	Operator	Version
php:php	php	le	5.5.14
php:php	php	eq	5.5.0
php:php	php	eq	5.5.1
php:php	php	eq	5.5.2
php:php	php	eq	5.5.3
php:php	php	eq	5.5.4
php:php	php	eq	5.5.5
php:php	php	eq	5.5.6
php:php	php	eq	5.5.7
php:php	php	eq	5.5.8