Patchwire CVEs, their patch status, and feeds to follow them

CVE-2014-9425

Fixed in a distro release EPSS 4%

Double free vulnerability in the zend_ts_hash_graceful_destroy function in zend_ts_hash.c in the Zend Engine in PHP through 5.5.20 and 5.6.x through 5.6.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Published 2014-12-31 · CVE record · OSV

Products: php, apple mac_os_x

Distro releases

ReleasePackageFixed in
Red Hat Enterprise Linux 6php0:5.3.3-46.el6_6
Red Hat Enterprise Linux 6php-bcmath0:5.3.3-46.el6_6
Red Hat Enterprise Linux 6php-cli0:5.3.3-46.el6_6
Red Hat Enterprise Linux 6php-common0:5.3.3-46.el6_6
Red Hat Enterprise Linux 6php-dba0:5.3.3-46.el6_6
Red Hat Enterprise Linux 6php-debuginfo0:5.3.3-46.el6_6
Red Hat Enterprise Linux 6php-devel0:5.3.3-46.el6_6
Red Hat Enterprise Linux 6php-embedded0:5.3.3-46.el6_6
Red Hat Enterprise Linux 6php-enchant0:5.3.3-46.el6_6
Red Hat Enterprise Linux 6php-fpm0:5.3.3-46.el6_6
Red Hat Enterprise Linux 6php-gd0:5.3.3-46.el6_6
Red Hat Enterprise Linux 6php-imap0:5.3.3-46.el6_6
Red Hat Enterprise Linux 6php-intl0:5.3.3-46.el6_6
Red Hat Enterprise Linux 6php-ldap0:5.3.3-46.el6_6
Red Hat Enterprise Linux 6php-mbstring0:5.3.3-46.el6_6
Red Hat Enterprise Linux 6php-mysql0:5.3.3-46.el6_6
Red Hat Enterprise Linux 6php-odbc0:5.3.3-46.el6_6
Red Hat Enterprise Linux 6php-pdo0:5.3.3-46.el6_6
Red Hat Enterprise Linux 6php-pgsql0:5.3.3-46.el6_6
Red Hat Enterprise Linux 6php-process0:5.3.3-46.el6_6
Red Hat Enterprise Linux 6php-pspell0:5.3.3-46.el6_6
Red Hat Enterprise Linux 6php-recode0:5.3.3-46.el6_6
Red Hat Enterprise Linux 6php-snmp0:5.3.3-46.el6_6
Red Hat Enterprise Linux 6php-soap0:5.3.3-46.el6_6
Red Hat Enterprise Linux 6php-tidy0:5.3.3-46.el6_6
Red Hat Enterprise Linux 6php-xml0:5.3.3-46.el6_6
Red Hat Enterprise Linux 6php-xmlrpc0:5.3.3-46.el6_6
Red Hat Enterprise Linux 6php-zts0:5.3.3-46.el6_6