CVE-2014-9427

26

FAUCET Score

CVE-2014-9427 is an out-of-bounds read vulnerability in the CGI component of PHP versions through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4. This flaw occurs when mmap is used to read a malformed .php file starting with '#' and lacking a newline, leading to improper length consideration. The vulnerability has a CVSS score of 7.5, indicating a high severity, and could allow remote attackers to obtain sensitive information from process memory or trigger unexpected code execution. There is no evidence of active exploitation, and public exploit code (Metasploit, Nuclei, ExploitDB) is not available. Community discussion and media coverage are minimal, suggesting limited public awareness or interest.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		1.0CPE matchmatch criteria	cpe:2.3:a:php:php:1.0:::::::*
		2.0CPE matchmatch criteria	cpe:2.3:a:php:php:2.0:::::::*
		2.0b10CPE matchmatch criteria	cpe:2.3:a:php:php:2.0b10:::::::*
		3.0CPE matchmatch criteria	cpe:2.3:a:php:php:3.0:::::::*
		3.0.1CPE matchmatch criteria	cpe:2.3:a:php:php:3.0.1:::::::*

CVSS Data

CVSS version used by this source: 2.0

7.5HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Exploitability Score

10.0

Impact Score

6.4

CvssVersion

2.0

Exploit Intelligence

EPSS Score

16.89%

Probability of exploitation in next 30 days

EPSS Percentile

96.7%

Percentile rank of EPSS score among Peer Group

As of 2026-07-28

Model: v2026.06.15

This CVE's current EPSS score of 0.1689 is in the 95th percentile among its peer group of 51,553 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (27)

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: php55-0:2.0-1.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: php55-php-0:5.5.21-2.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: php54-0:2.0-1.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: php54-php-0:5.4.40-1.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: php54-php-pecl-zendopcache-0:7.0.4-3.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUSFixed in: php55-0:2.0-1.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUSFixed in: php55-php-0:5.5.21-2.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUSFixed in: php54-0:2.0-1.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUSFixed in: php54-php-0:5.4.40-1.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUSFixed in: php54-php-pecl-zendopcache-0:7.0.4-3.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: php55-0:2.0-1.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: php55-php-0:5.5.21-2.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: php54-0:2.0-1.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: php54-php-0:5.4.40-1.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: php54-php-pecl-zendopcache-0:7.0.4-3.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: php55-0:2.0-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: php55-php-0:5.5.21-2.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: php54-0:2.0-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: php54-php-0:5.4.40-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: php54-php-pecl-zendopcache-0:7.0.4-3.el7

redhatno patchvia redhat_api

Product: Red Hat Software CollectionsFixed in: php54-php

redhatno patchvia redhat_api

Product: Red Hat Software CollectionsFixed in: php55-php

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 6Fixed in: php

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 5Fixed in: php

redhatend of lifevia redhat_api

Product: Red Hat OpenShift Enterprise 2Fixed in: php

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: php

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 5Fixed in: php53

Vendor Advisories (1)

redhatCVE-2014-9427Low

php: out of bounds read when parsing a crafted .php file

References

advisories.mageia.org / MGASA-2015-0040.html

lists.apple.com / archives/security-announce/2015/Sep/msg00008.html

lists.opensuse.org / opensuse-security-announce/2015-02/msg00029.html

lists.opensuse.org / opensuse-updates/2015-02/msg00079.html

openwall.com / lists/oss-security/2014/12/31/6

openwall.com / lists/oss-security/2015/01/01/1

openwall.com / lists/oss-security/2015/01/03/4

rhn.redhat.com / errata/RHSA-2015-1053.html

rhn.redhat.com / errata/RHSA-2015-1066.html

bugs.php.net / bug.php

Exploit

security.gentoo.org / glsa/201503-03

support.apple.com / HT205267

mandriva.com / security/advisories

oracle.com / technetwork/topics/security/linuxbulletinjan2016-2867209.html

securityfocus.com / bid/71833