KLA10290 DoS vulnerability in PHP

A use-after-free vulnerability was found in PHP. By exploiting this vulnerability malicious users can cause denial of service or cause other unspecified impact. This vulnerability can be exploited locally at a point related to SPL.

Original advisories

PHP bugtracker

Related products

PHP

CVE list

CVE-2014-4698 warning

CVE-2014-4670 warning

Solution

Update to latest version

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• PHP versions 5.5.14 and earlier