CVE-2014-9425

Double free vulnerability in the zend_ts_hash_graceful_destroy function in zend_ts_hash.c in the Zend Engine in PHP through 5.5.20 and 5.6.x through 5.6.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

• http://advisories.mageia.org/MGASA-2015-0040.htmlThird Party Advisory
• http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=24125f0f26f3787c006e4a51611ba33ee3b841cb
• http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=2bcf69d073190e4f032d883f3416dea1b027a39e
• http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=fbf3a6bc1abcc8a5b5226b0ad9464c37f11ddbd6
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.htmlMailing List, Third Party Advisory
• http://openwall.com/lists/oss-security/2014/12/29/6Mailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1218.htmlThird Party Advisory
• http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.htmlThird Party Advisory
• http://www.securityfocus.com/bid/71800Third Party Advisory, VDB Entry
• https://bugs.php.net/bug.php?id=68676Vendor Advisory
• https://security.gentoo.org/glsa/201503-03Third Party Advisory
• https://support.apple.com/HT205267Third Party Advisory
• http://advisories.mageia.org/MGASA-2015-0040.htmlThird Party Advisory
• http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=24125f0f26f3787c006e4a51611ba33ee3b841cb
• http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=2bcf69d073190e4f032d883f3416dea1b027a39e
• http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=fbf3a6bc1abcc8a5b5226b0ad9464c37f11ddbd6
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.htmlMailing List, Third Party Advisory
• http://openwall.com/lists/oss-security/2014/12/29/6Mailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1218.htmlThird Party Advisory
• http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.htmlThird Party Advisory
• http://www.securityfocus.com/bid/71800Third Party Advisory, VDB Entry
• https://bugs.php.net/bug.php?id=68676Vendor Advisory
• https://security.gentoo.org/glsa/201503-03Third Party Advisory
• https://support.apple.com/HT205267Third Party Advisory

Published

Dec 31, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-9419The __switch_to function in arch/x86/kernel/process_64.c in …
• CVE-2014-9420The rock_continue function in fs/isofs/rock.c in the Linux k…
• CVE-2014-9421The auth_gssapi_unwrap_data function in lib/rpc/auth_gssapi_…
• CVE-2014-9422The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc…
• CVE-2014-9423The svcauth_gss_accept_sec_context function in lib/rpc/svc_a…
• CVE-2014-9424Double free vulnerability in the ssl_parse_clienthello_use_s…
• CVE-2014-9426The apprentice_load function in libmagic/apprentice.c in the…7.3
• CVE-2014-9427sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.…
• CVE-2014-9428The batadv_frag_merge_packets function in net/batman-adv/fra…
• CVE-2014-9429Multiple cross-site scripting (XSS) vulnerabilities in Smoot…
• CVE-2014-9430Cross-site scripting (XSS) vulnerability in httpd/cgi-bin/vp…
• CVE-2014-9431Multiple cross-site request forgery (CSRF) vulnerabilities i…