Double free vulnerability in the zend_ts_hash_graceful_destroy function in zend_ts_hash.c in the Zend Engine in PHP through 5.5.20 and 5.6.x through 5.6.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
References
Link | Resource |
---|---|
http://advisories.mageia.org/MGASA-2015-0040.html | Third Party Advisory |
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=24125f0f26f3787c006e4a51611ba33ee3b841cb | |
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=2bcf69d073190e4f032d883f3416dea1b027a39e | |
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=fbf3a6bc1abcc8a5b5226b0ad9464c37f11ddbd6 | |
http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html | Mailing List Third Party Advisory |
http://openwall.com/lists/oss-security/2014/12/29/6 | Mailing List Third Party Advisory |
http://rhn.redhat.com/errata/RHSA-2015-1218.html | Third Party Advisory |
http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html | Third Party Advisory |
http://www.securityfocus.com/bid/71800 | Third Party Advisory VDB Entry |
https://bugs.php.net/bug.php?id=68676 | Vendor Advisory |
https://security.gentoo.org/glsa/201503-03 | Third Party Advisory |
https://support.apple.com/HT205267 | Third Party Advisory |
Configurations
History
07 Nov 2023, 02:23
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
04 Aug 2022, 15:46
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:php:php:5.6.2:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.6.1:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.6.3:*:*:*:*:*:*:* |
|
References | (APPLE) http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - Mailing List, Third Party Advisory | |
References | (CONFIRM) https://support.apple.com/HT205267 - Third Party Advisory | |
References | (CONFIRM) http://git.php.net/?p=php-src.git;a=commit;h=2bcf69d073190e4f032d883f3416dea1b027a39e - Patch, Vendor Advisory | |
References | (GENTOO) https://security.gentoo.org/glsa/201503-03 - Third Party Advisory | |
References | (MLIST) http://openwall.com/lists/oss-security/2014/12/29/6 - Mailing List, Third Party Advisory | |
References | (CONFIRM) http://advisories.mageia.org/MGASA-2015-0040.html - Third Party Advisory | |
References | (CONFIRM) http://git.php.net/?p=php-src.git;a=commit;h=fbf3a6bc1abcc8a5b5226b0ad9464c37f11ddbd6 - Patch, Vendor Advisory | |
References | (REDHAT) http://rhn.redhat.com/errata/RHSA-2015-1218.html - Third Party Advisory | |
References | (CONFIRM) http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - Third Party Advisory | |
References | (CONFIRM) http://git.php.net/?p=php-src.git;a=commit;h=24125f0f26f3787c006e4a51611ba33ee3b841cb - Patch, Vendor Advisory | |
References | (BID) http://www.securityfocus.com/bid/71800 - Third Party Advisory, VDB Entry |
Information
Published : 2014-12-31 02:59
Updated : 2023-12-10 11:31
NVD link : CVE-2014-9425
Mitre link : CVE-2014-9425
CVE.ORG link : CVE-2014-9425
JSON object : View
Products Affected
php
- php
apple
- mac_os_x
CWE