Description

Double free vulnerability in the zend_ts_hash_graceful_destroy function in zend_ts_hash.c in the Zend Engine in PHP through 5.5.20 and 5.6.x through 5.6.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Remediation

References

CVE-2014-9425

Related Vulnerabilities

Apache Tomcat Configuration Vulnerability (CVE-2010-4312)

WordPress Plugin WP Symposium Cross-Site Scripting (13.02)

Apache HTTP Server Other Vulnerability (CVE-2001-0729)

WordPress Plugin Easy Testimonials Cross-Site Request Forgery (3.6.1)

IBM WebSEAL Session Fixation Vulnerability (CVE-2019-4152)

Severity

High

Classification

CVE-2014-9425

Tags

Missing Update Known Vulnerabilities