Vulnerability Database

290,020

Total vulnerabilities in the database

CVE-2014-4670

Use-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact via crafted iterator usage within applications in certain web-hosting environments.

  • Published: Jul 10, 2014
  • Updated: Apr 13, 2023
  • CVE: CVE-2014-4670
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.6
  • AV:L/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
php / php 5.5.0-alpha1 5.5.0-alpha1.x
php / php 5.5.0-alpha3 5.5.0-alpha3.x
php / php - 5.5.14.x
php / php 5.5.0-beta3 5.5.0-beta3.x
php / php 5.5.0 5.5.0.x
php / php 5.5.1 5.5.1.x
php / php 5.5.5 5.5.5.x
php / php 5.5.7 5.5.7.x
php / php 5.5.0-beta1 5.5.0-beta1.x
php / php 5.5.12 5.5.12.x
php / php 5.5.6 5.5.6.x
php / php 5.5.0-rc1 5.5.0-rc1.x
php / php 5.5.0-beta4 5.5.0-beta4.x
php / php 5.5.3 5.5.3.x
php / php 5.5.8 5.5.8.x
php / php 5.5.0-alpha6 5.5.0-alpha6.x
php / php 5.5.0-beta2 5.5.0-beta2.x
php / php 5.5.11 5.5.11.x
php / php 5.5.13 5.5.13.x
php / php 5.5.4 5.5.4.x
php / php 5.5.0-alpha4 5.5.0-alpha4.x
php / php 5.5.10 5.5.10.x
php / php 5.5.0-alpha5 5.5.0-alpha5.x
php / php 5.5.0-alpha2 5.5.0-alpha2.x
php / php 5.5.2 5.5.2.x
php / php 5.5.0-rc2 5.5.0-rc2.x
php / php 5.5.9 5.5.9.x