CVE-2014-4698

php: ArrayIterator use-after-free due to object change during sorting

Loading…

Severity

Low

Red Hat Product Security

2.1

CVSS 2.0

Review impact separately from score.

Published · June 29, 2014

Updated · June 28, 2026

Description

A use-after-free flaw was found in the way PHP handled certain ArrayIterators. A malicious script author could possibly use this flaw to disclose certain portions of server memory.

Statement

This issue did not affect the versions of php as shipped with Red Hat Enterprise Linux 5.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 2.0 · 2.1
AV:L/AC:L/Au:N/C:N/I:N/A:P

CWE-416 · Use After Free