PT-2014-1411 · Php+4 · Php+4

Publicado 2014-07-04 · Atualizado 2024-06-15 · CVE-2014-4698

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.5.14

Description The issue is related to a use-after-free vulnerability in the SPL component, specifically in the ext/spl/spl array.c file. This vulnerability can be exploited by context-dependent attackers to cause a denial of service or possibly have other unspecified impacts. The exploitation is possible via crafted ArrayIterator usage within applications in certain web-hosting environments.

Recommendations For PHP versions prior to 5.5.14, update to version 5.5.14 or later to resolve the issue. As a temporary workaround, consider restricting the use of the ArrayIterator in applications to minimize the risk of exploitation.

Correção

Identificadores relacionados

BDU:2015-00366

CESA-2014_1326

CESA-2014_1327

CVE-2014-4698

MGASA-2014-0324

OPENSUSE-SU-2024:10290-1

OPENSUSE-SU-2024:10344-1

OPENSUSE-SU-2024:11169-1

RHSA-2014:1326

RHSA-2014:1327

RHSA-2014:1765

RHSA-2014:1766

RHSA-2014_1326

RHSA-2014_1327

SUSE-SU-2016:1638-1

USN-2276-1

Produtos afetados

Centos

Php

Red Hat

Suse

Ubuntu

Referências · 369

• https://github.com/php/php-src/commit/7ba1409a1aee5925180de546057ddd84ff267947 · Nota
• https://github.com/file/file/commit/6d209c1c489457397a5763bca4b28e43aac90391 · Nota
• https://github.com/file/file/commit/758e066df72fb1ac08d2eea91ddc3973d259e991 · Nota
• https://github.com/file/file/commit/27a14bc7ba285a0a5ebfdb55e54001aa11932b08 · Nota
• https://github.com/file/file/commit/0641e56be1af003aa02c7c6b0184466540637233 · Nota
• https://github.com/file/file/commit/4a284c89d6ef11aca34da65da7d673050a5ea320 · Nota
• https://github.com/file/file/commit/74cafd7de9ec99a14f4480927580e501c8f852c3 · Nota
• https://github.com/file/file/commit/71a8b6c0d758acb0f73e2e51421a711b5e9d6668 · Nota
• https://github.com/file/file/commit/40bade80cbe2af1d0b2cd0420cebd5d5905a2382 · Nota
• https://github.com/file/file/commit/36fadd29849b8087af9f4586f89dbf74ea45be67 · Nota
• https://github.com/file/file/commit/93e063ee374b6a75729df9e7201fb511e47e259d · Nota
• https://suse.com/security/cve/CVE-2015-3152 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10344-1 · Aviso do Fabricante
• https://lists.centos.org/pipermail/centos-announce/2014-September/082764.html · Nota
• https://suse.com/security/cve/CVE-2006-7243 · Nota