Double free vulnerability in the zend_ts_hash_graceful_destroy function in zend_ts_hash.c in the Zend Engine in PHP through 5.5.20 and 5.6.x through 5.6.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Apachemodphp | — | Upgrade macOS to the latest version | Apr 5, 2017 | Dec 30, 2014 |
| Centos_linux | — | Upgrade php-xmlUpgrade php-snmpUpgrade php-pgsqlUpgrade php-mbstringUpgrade php-mysqlUpgrade php-xmlrpcUpgrade php-cliUpgrade php-commonUpgrade php-odbcUpgrade php-recodeUpgrade php-intlUpgrade php-pdoUpgrade php-pspellUpgrade php-dbaUpgrade php-develUpgrade phpUpgrade php-gdUpgrade php-tidyUpgrade php-embeddedUpgrade php-imapUpgrade php-fpmUpgrade php-processUpgrade php-ldapUpgrade php-ztsUpgrade php-bcmathUpgrade php-enchantUpgrade php-soap | Dec 1, 2016 | Dec 30, 2014 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Dec 30, 2014 |
| Oracle Solaris | — | Upgrade web/php-52/extension/php-memcache to version 2.2.5-0.175.2.12.0.4.0 on Solaris 11.2Upgrade web/php-53/extension/php-zendopcache to version 7.0.2-0.175.2.12.0.4.0 on Solaris 11.2Upgrade web/php-53/extension/php-tcpwrap to version 1.1.3-0.175.2.12.0.4.0 on Solaris 11.2Upgrade web/php-52/documentation to version 5.2.17-0.175.2.12.0.3.0 on Solaris 11.2Upgrade web/server/apache-22/module/apache-php52 to version 5.2.17-0.175.2.12.0.4.0 on Solaris 11.2Upgrade web/php-52 to version 5.2.17-0.175.2.12.0.4.0 on Solaris 11.2Upgrade web/php-52/extension/php-tcpwrap to version 1.1.3-0.175.2.12.0.4.0 on Solaris 11.2Upgrade web/php-53 to version 5.3.29-0.175.2.12.0.4.0 on Solaris 11.2Upgrade web/server/apache-22/module/apache-php53 to version 5.3.29-0.175.2.12.0.4.0 on Solaris 11.2Upgrade web/php-53/documentation to version 5.3.29-0.175.2.12.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-pear to version 5.3.29-0.175.2.12.0.4.0 on Solaris 11.2Upgrade web/php-52/extension/php-pear to version 5.2.17-0.175.2.12.0.4.0 on Solaris 11.2Upgrade web/php-53/extension/php-mysql to version 5.3.29-0.175.2.12.0.4.0 on Solaris 11.2Upgrade web/php-53/extension/php-suhosin to version 0.9.33-0.175.2.12.0.4.0 on Solaris 11.2Upgrade web/php-52/extension/php-suhosin to version 0.9.29-0.175.2.12.0.4.0 on Solaris 11.2Upgrade web/php-52/extension/php-mysql to version 5.2.17-0.175.2.12.0.4.0 on Solaris 11.2Upgrade web/php-52/extension/php-apc to version 3.0.19-0.175.2.12.0.4.0 on Solaris 11.2Upgrade web/php-53/extension/php-idn to version 0.2.0-0.175.2.12.0.4.0 on Solaris 11.2Upgrade web/php-53/extension/php-apc to version 3.1.9-0.175.2.12.0.4.0 on Solaris 11.2Upgrade web/php-52/extension/php-idn to version 0.2.0-0.175.2.12.0.4.0 on Solaris 11.2Upgrade web/php-53/extension/php-xdebug to version 2.2.0-0.175.2.12.0.4.0 on Solaris 11.2Upgrade web/php-52/extension/php-xdebug to version 2.0.5-0.175.2.12.0.4.0 on Solaris 11.2Upgrade web/php-53/extension/php-memcache to version 3.0.6-0.175.2.12.0.4.0 on Solaris 11.2 | May 29, 2017 | Dec 30, 2014 |
| Oracle_linux | — | Upgrade php-enchantUpgrade php-mysqlUpgrade php-soapUpgrade php-recodeUpgrade php-processUpgrade php-gdUpgrade php-embeddedUpgrade php-snmpUpgrade php-mbstringUpgrade php-xmlUpgrade php-cliUpgrade php-dbaUpgrade php-pspellUpgrade php-fpmUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-odbcUpgrade phpUpgrade php-ztsUpgrade php-bcmathUpgrade php-imapUpgrade php-commonUpgrade php-develUpgrade php-pgsqlUpgrade php-intlUpgrade php-ldapUpgrade php-tidy | Oct 16, 2024 | Dec 31, 2014 |
| Php | — | Upgrade to PHP version 5.6.5Upgrade to PHP version 5.5.21 | Jan 28, 2015 | Dec 30, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub