NetSight
IP …
medium4.6

CVE-2014-4670

Use-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause a denial of service…

Impact

Use-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact via crafted iterator usage within applications in certain web-hosting environments.

Affected products

VendorProductAffected versions
PhpPhp
through 5.5.14
Versions 5.5.0, 5.5.1, 5.5.2, 5.5.3, 5.5.4

References