Description
Double free vulnerability in the SplDoublyLinkedList::offsetSet function in ext/spl/spl_dllist.c in PHP 7.x before 7.0.6 allows remote attackers to execute arbitrary code via a crafted index.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | php7.0 | 7.0.4-7ubuntu2.1 | USN-2984-1 |
| Ubuntu 14.04 LTS | php5 | 5.5.9+dfsg-1ubuntu4.17 | USN-2984-1 |
Advisories 1
- USN-2984-1 php5, php7.0 vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026