Test ID:	1.3.6.1.4.1.25623.1.0.805412
Category:	Web application abuses
Title:	PHP Multiple Double Free Vulnerabilities (Jan 2015)
Summary:	PHP is prone to a denial of service (DoS) vulnerability.
Description:	Summary: PHP is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Multiple flaws are due to: - Double free error in the 'zend_ts_hash_graceful_destroy' function in 'zend_ts_hash.c script in the Zend Engine in PHP. - flaw in the 'GetCode_' function in 'gd_gif_in.c' script in GD Graphics Library (LibGD). Vulnerability Impact: Successful exploitation will allow remote attackers to cause a denial of service or possibly have unspecified other impact. Affected Software/OS: PHP versions through 5.5.20 and 5.6.x through 5.6.4 Solution: Update to PHP version 5.5.21 or 5.6.5 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-9425 http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html BugTraq ID: 71800 http://www.securityfocus.com/bid/71800 https://security.gentoo.org/glsa/201503-03 http://openwall.com/lists/oss-security/2014/12/29/6 RedHat Security Advisories: RHSA-2015:1218 http://rhn.redhat.com/errata/RHSA-2015-1218.html Common Vulnerability Exposure (CVE) ID: CVE-2014-9709 BugTraq ID: 73306 http://www.securityfocus.com/bid/73306 Debian Security Information: DSA-3215 (Google Search) http://www.debian.org/security/2015/dsa-3215 https://security.gentoo.org/glsa/201606-10 https://security.gentoo.org/glsa/201607-04 HPdes Security Advisory: HPSBUX03337 http://marc.info/?l=bugtraq&m=143403519711434&w=2 HPdes Security Advisory: SSRT102066 http://www.mandriva.com/security/advisories?name=MDVSA-2015:153 RedHat Security Advisories: RHSA-2015:1053 http://rhn.redhat.com/errata/RHSA-2015-1053.html RedHat Security Advisories: RHSA-2015:1066 http://rhn.redhat.com/errata/RHSA-2015-1066.html RedHat Security Advisories: RHSA-2015:1135 http://rhn.redhat.com/errata/RHSA-2015-1135.html http://www.securitytracker.com/id/1033703 SuSE Security Announcement: SUSE-SU-2015:0868 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html SuSE Security Announcement: openSUSE-SU-2015:0644 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html http://www.ubuntu.com/usn/USN-2987-1
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.