Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-4698
HistoryJul 10, 2014 - 11:06 a.m.

CVE-2014-4698

2014-07-1011:06:29
[email protected]
web.nvd.nist.gov
6

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

High

EPSS

0.003

Percentile

69.3%

JSON

Use-after-free vulnerability in ext/spl/spl_array.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact via crafted ArrayIterator usage within applications in certain web-hosting environments.

Affected configurations

Nvd
Node
phpphpRange5.4.0–5.4.32
OR
phpphpRange5.5.0–5.5.15
VendorProductVersionCPE
phpphp*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*

Related

prion 1
ubuntucve 1
cvelist 1
cve 1
veracode 4
kaspersky 1
nessus 22
openvas 14
mageia 1
centos 2
f5 2
hackerone 1
redhat 4
slackware 1
oraclelinux 3
ubuntu 1
securityvulns 4
osv 3
suse 1
rosalinux 1
prion
prion
Design/Logic Flaw
2014-07-10 11:06:00
ubuntucve
ubuntucve
CVE-2014-4698
2014-07-04 00:00:00
cvelist
cvelist
CVE-2014-4698
2014-07-10 10:00:00
cve
cve
CVE-2014-4698
2014-07-10 11:06:29
veracode
veracode
Arbitrary Code Execution
2019-05-02 05:04:21
Denial Of Service (DoS)
2019-05-02 05:04:17
Denial Of Service (DoS)
2019-05-02 05:04:16
kaspersky
kaspersky
KLA10290 DoS vulnerability in PHP
2014-07-10 00:00:00
nessus
nessus
PHP 5.5.x < 5.5.15 Multiple Vulnerabilities
2014-07-25 00:00:00
openSUSE Security Update : openSUSE-2014- (openSUSE-2014--1)
2014-07-31 00:00:00
openSUSE Security Update : php5 (openSUSE-2014-471)
2014-08-01 00:00:00
openvas
openvas
PHP Multiple Use-After-Free Vulnerabilities (Jul 2014)
2014-07-18 00:00:00
Mageia: Security Advisory (MGASA-2014-0324)
2022-01-28 00:00:00
RedHat Update for php53 and php RHSA-2014:1326-01
2014-10-01 00:00:00
mageia
mageia
Updated php packages fix security vulnerabilities
2014-08-08 15:23:49
centos
centos
php, php53 security update
2014-09-30 10:27:47
php security update
2014-09-30 10:59:18
f5
f5
SOL15761 - Multiple PHP 5.x vulnerabilities
2014-10-30 00:00:00
K15761 : Multiple PHP 5.x vulnerabilities
2015-09-17 00:00:00
hackerone
hackerone
Gratipay: PHP 5.4.45 is Outdated and Full of Preformance Interupting Arbitrary Code Execution Bugs
2016-04-16 22:49:59
redhat
redhat
(RHSA-2014:1326) Moderate: php53 and php security update
2014-09-30 00:00:00
(RHSA-2014:1327) Moderate: php security update
2014-09-30 00:00:00
(RHSA-2014:1766) Important: php55-php security update
2014-10-30 00:00:00
slackware
slackware
[slackware-security] php
2014-09-04 22:00:56
oraclelinux
oraclelinux
php53 and php security update
2014-09-30 00:00:00
php security update
2014-09-30 00:00:00
php security and bug fix update
2015-06-23 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2014-07-09 00:00:00
securityvulns
securityvulns
[USN-2276-1] PHP vulnerabilities
2014-07-14 00:00:00
file / PHP multiple security vulnerabilities
2014-07-14 00:00:00
Apple Mac OS X multiple security vulnerabilities
2015-04-13 00:00:00
osv
osv
apache2-mod_php5-5.6.28-1.1 on GA media
2024-06-15 00:00:00
apache2-mod_php7-7.0.14-1.4 on GA media
2024-06-15 00:00:00
php8-8.0.11-1.1 on GA media
2024-06-15 00:00:00
suse
suse
Security update for php53 (important)
2016-06-21 13:08:17
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

High

EPSS

0.003

Percentile

69.3%

JSON
Related for NVD:CVE-2014-4698
prion1ubuntucve1cvelist1cve1veracode4kaspersky1nessus22openvas14mageia1centos2f52hackerone1redhat4slackware1oraclelinux3ubuntu1securityvulns4osv3suse1rosalinux1