CVE-2014-3622: Use After Free
It was found [1] that there's an issue in php which in some cases may lead to remote code execution.
[1]: https://bugs.php.net/bug.php?id=68088
Other sources
Use-after-free vulnerability in the addpostvar function in the Posthandler component in PHP 5.6.x before 5.6.1 might allow remote attackers to execute arbitrary code by leveraging a third-party filter extension that accesses a certain ksep value.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3622?
CVE-2014-3622 has a high severity level due to its potential to lead to remote code execution.
How do I fix CVE-2014-3622?
To fix CVE-2014-3622, upgrade PHP to version 5.6.1 or later.
What versions of PHP are affected by CVE-2014-3622?
CVE-2014-3622 affects PHP versions before 5.6.1, specifically within the 5.6.0 release.
Can CVE-2014-3622 be exploited remotely?
Yes, CVE-2014-3622 can be exploited remotely if the vulnerable version of PHP is exposed to the internet.
Is CVE-2014-3622 related to a specific PHP function?
CVE-2014-3622 is related to a use-after-free vulnerability in the add_post_var function of the Posthandler component in PHP.