PHP CVE-2014-9425 Double Free Denial of Service Vulnerability

Bugtraq ID:	71800
Class:	Design Error
CVE:	CVE-2014-9425
Remote:	Yes
Local:	No
Published:	Dec 29 2014 12:00AM
Updated:	Nov 03 2015 07:52PM
Credit:	Joshua Rogers
Vulnerable:	Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Gentoo Linux CentOS CentOS 6 Apple Mac Os X 10.7.4 Apple Mac Os X 10.7.3 Apple Mac Os X 10.7.1
Not Vulnerable:

PHP CVE-2014-9425 Double Free Denial of Service Vulnerability

PHP is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to crash the affected application, denying service to legitimate users.

PHP CVE-2014-9425 Double Free Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

PHP CVE-2014-9425 Double Free Denial of Service Vulnerability

References:

• PHP Homepage (PHP)
  
• Re: CVE Request: Double Free in PHP (Joshua Rogers)
  
• Bug #68676 Explicit Double Free (PHP)