In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop processing the request, without cleaning up temporary files created by upload request. This potentially could lead to accumulation of uncleaned temporary files exhausting the disk space on the target server.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-pdoUpgrade php-develUpgrade php-bcmathUpgrade php-jsonUpgrade php-dbgUpgrade php-xmlrpcUpgrade php-pecl-zipUpgrade php-snmpUpgrade libzip-develUpgrade php-odbcUpgrade php-ldapUpgrade php-embeddedUpgrade php-pearUpgrade php-commonUpgrade php-gmpUpgrade libzipUpgrade php-pecl-xdebugUpgrade php-mysqlndUpgrade php-xmlUpgrade php-pecl-apcuUpgrade php-recodeUpgrade php-fpmUpgrade php-cliUpgrade php-pecl-apcu-develUpgrade php-intlUpgrade php-pgsqlUpgrade phpUpgrade php-processUpgrade php-gdUpgrade php-pecl-rrdUpgrade php-soapUpgrade libzip-toolsUpgrade php-mbstringUpgrade php-opcacheUpgrade apcu-panelUpgrade php-enchantUpgrade php-dba | May 4, 2022 | May 20, 2020 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | May 20, 2020 |
| Amazon_linux | — | Upgrade php73Upgrade php72 | Jul 18, 2020 | May 20, 2020 |
| Centos_linux | — | Upgrade php-pecl-xdebugUpgrade php-pecl-xdebug-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-bcmathUpgrade php-enchantUpgrade php-fpmUpgrade php-gmpUpgrade php-gd-debuginfoUpgrade php-pearUpgrade php-odbc-debuginfoUpgrade php-dba-debuginfoUpgrade php-dbg-debuginfoUpgrade libzip-debuginfoUpgrade php-gdUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcuUpgrade php-pgsqlUpgrade libzipUpgrade php-fpm-debuginfoUpgrade php-opcache-debuginfoUpgrade php-processUpgrade apcu-panelUpgrade php-pecl-rrd-debugsourceUpgrade php-dbaUpgrade php-pecl-zip-debuginfoUpgrade libzip-toolsUpgrade php-embeddedUpgrade php-bcmath-debuginfoUpgrade php-cliUpgrade phpUpgrade php-gmp-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-opcacheUpgrade php-debugsourceUpgrade php-soap-debuginfoUpgrade php-snmpUpgrade php-mysqlndUpgrade php-process-debuginfoUpgrade php-ldapUpgrade php-pecl-apcu-debugsourceUpgrade php-recodeUpgrade php-debuginfoUpgrade php-common-debuginfoUpgrade php-pgsql-debuginfoUpgrade libzip-develUpgrade php-snmp-debuginfoUpgrade php-dbgUpgrade libzip-debugsourceUpgrade php-pecl-rrdUpgrade php-ldap-debuginfoUpgrade php-recode-debuginfoUpgrade php-commonUpgrade php-pecl-apcu-debuginfoUpgrade php-embedded-debuginfoUpgrade php-xmlUpgrade php-intlUpgrade php-pecl-zipUpgrade php-xmlrpc-debuginfoUpgrade php-xmlrpcUpgrade php-json-debuginfoUpgrade php-odbcUpgrade php-pdo-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-xml-debuginfoUpgrade php-pdoUpgrade libzip-tools-debuginfoUpgrade php-intl-debuginfoUpgrade php-cli-debuginfoUpgrade php-pecl-apcu-devel | Sep 9, 2020 | May 20, 2020 |
| Debian | — | Upgrade php7.4 | Jun 30, 2020 | May 20, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-pdoUpgrade php-commonUpgrade php-odbcUpgrade php-pgsqlUpgrade php-ldapUpgrade phpUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-soapUpgrade php-processUpgrade php-recodeUpgrade php-cliUpgrade php-gdUpgrade php-mysql | Nov 3, 2020 | May 20, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-commonUpgrade php-xmlrpcUpgrade php-odbcUpgrade php-pgsqlUpgrade php-xmlUpgrade php-mysqlUpgrade php-cliUpgrade php-recodeUpgrade php-ldapUpgrade php-processUpgrade php-pdoUpgrade phpUpgrade php-soapUpgrade php-gd | Sep 28, 2020 | May 20, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-xmlrpcUpgrade php-pdoUpgrade php-soapUpgrade php-processUpgrade php-gdUpgrade php-recodeUpgrade phpUpgrade php-fpmUpgrade php-ldapUpgrade php-odbcUpgrade php-cliUpgrade php-commonUpgrade php-xml | Jul 31, 2020 | May 20, 2020 |
| Oracle Solaris | — | Upgrade web/php-74 to version 7.4.8-11.4.25.0.1.75.1 on Solaris 11.4Upgrade web/php-73 to version 7.3.20-11.4.25.0.1.75.1 on Solaris 11.4 | Jan 19, 2021 | May 20, 2020 |
| Oracle_linux | — | Upgrade php-opcacheUpgrade php-embeddedUpgrade php-pecl-apcu-develUpgrade apcu-panelUpgrade php-pecl-zipUpgrade php-odbcUpgrade php-intlUpgrade php-bcmathUpgrade phpUpgrade libzip-toolsUpgrade php-mysqlndUpgrade php-pgsqlUpgrade php-dbgUpgrade libzipUpgrade php-pdoUpgrade php-enchantUpgrade php-ldapUpgrade libzip-develUpgrade php-commonUpgrade php-pecl-apcuUpgrade php-pearUpgrade php-xmlUpgrade php-cliUpgrade php-snmpUpgrade php-pecl-xdebugUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-gmpUpgrade php-processUpgrade php-fpmUpgrade php-pecl-rrdUpgrade php-soapUpgrade php-develUpgrade php-jsonUpgrade php-dbaUpgrade php-gdUpgrade php-mbstring | Sep 10, 2020 | May 14, 2020 |
| Php | — | Upgrade to PHP version 7.2.31Upgrade to PHP version 7.3.18Upgrade to PHP version 7.4.6 | May 26, 2020 | May 20, 2020 |
| Redhat_linux | — | Upgrade phpUpgrade php-recodeUpgrade php-process-debuginfoUpgrade libzip-debuginfoUpgrade libzipUpgrade php-fpm-debuginfoUpgrade php-json-debuginfoNo solution existsUpgrade php-intlUpgrade php-opcacheUpgrade php-debuginfoUpgrade libzip-develUpgrade php-embedded-debuginfoUpgrade php-cli-debuginfoUpgrade php-cliUpgrade php-enchantUpgrade php-pgsql-debuginfoUpgrade php-gd-debuginfoUpgrade php-mysqlndUpgrade php-dbgUpgrade php-pdo-debuginfoUpgrade php-embeddedUpgrade libzip-debugsourceUpgrade php-gmp-debuginfoUpgrade php-soapUpgrade php-pecl-apcu-debugsourceUpgrade php-mbstring-debuginfoUpgrade php-common-debuginfoUpgrade php-pgsqlUpgrade php-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-ldap-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-snmpUpgrade apcu-panelUpgrade php-ldapUpgrade php-odbcUpgrade libzip-toolsUpgrade php-dbaUpgrade php-develUpgrade php-gmpUpgrade php-gdUpgrade php-intl-debuginfoUpgrade php-pecl-apcu-develUpgrade php-xml-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-enchant-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-bcmathUpgrade php-dba-debuginfoUpgrade php-mbstringUpgrade php-jsonUpgrade php-pecl-apcu-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-recode-debuginfoUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-pecl-zipUpgrade php-commonUpgrade php-odbc-debuginfoUpgrade php-pdoUpgrade php-pecl-apcuUpgrade php-dbg-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-opcache-debuginfoUpgrade php-processUpgrade php-pecl-xdebugUpgrade libzip-tools-debuginfoUpgrade php-pecl-rrdUpgrade php-fpmUpgrade php-pear | Sep 9, 2020 | May 20, 2020 |
| Rocky_linux | — | Upgrade php-pecl-zip-debuginfoUpgrade php-ldapUpgrade php-mysqlnd-debuginfoUpgrade php-pgsqlUpgrade php-common-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pgsql-debuginfoUpgrade php-odbcUpgrade php-recode-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-develUpgrade php-pecl-apcu-debugsourceUpgrade php-commonUpgrade php-pecl-xdebugUpgrade php-soap-debuginfoUpgrade php-debuginfoUpgrade php-json-debuginfoUpgrade php-xmlUpgrade php-fpmUpgrade php-fpm-debuginfoUpgrade php-dbgUpgrade php-mbstring-debuginfoUpgrade php-xml-debuginfoUpgrade php-cliUpgrade php-dba-debuginfoUpgrade php-pecl-apcuUpgrade php-snmpUpgrade php-intlUpgrade libzip-develUpgrade php-soapUpgrade php-enchantUpgrade php-mbstringUpgrade libzip-debugsourceUpgrade php-odbc-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-opcacheUpgrade php-embedded-debuginfoUpgrade phpUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-cli-debuginfoUpgrade libzipUpgrade php-process-debuginfoUpgrade php-intl-debuginfoUpgrade php-debugsourceUpgrade php-mysqlndUpgrade php-embeddedUpgrade php-pdoUpgrade libzip-toolsUpgrade php-recodeUpgrade php-pdo-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-gmpUpgrade php-xmlrpcUpgrade php-snmp-debuginfoUpgrade php-jsonUpgrade php-gmp-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-dbaUpgrade php-gdUpgrade php-bcmath-debuginfoUpgrade php-processUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-rrdUpgrade php-pecl-apcu-develUpgrade php-opcache-debuginfoUpgrade php-gd-debuginfoUpgrade php-dbg-debuginfoUpgrade php-ldap-debuginfoUpgrade php-bcmathUpgrade php-pecl-zip | Mar 12, 2024 | May 20, 2020 |
| Suse | — | Upgrade php7-ftpUpgrade php7-domUpgrade php5-bcmathUpgrade php7-mcryptUpgrade php5-sysvshmUpgrade php7-sodiumUpgrade php5-bz2Upgrade php7-xmlreaderUpgrade php72-pharUpgrade php7-firebirdUpgrade php5-opensslUpgrade php7-embedUpgrade php5Upgrade php5-fileinfoUpgrade php7-enchantUpgrade php72-readlineUpgrade php72-pgsqlUpgrade php72-pdoUpgrade php7-intlUpgrade php72-wddxUpgrade php7-pgsqlUpgrade php5-imapUpgrade php72-shmopUpgrade php5-intlUpgrade php5-posixUpgrade php72-socketsUpgrade php5-gettextUpgrade php7-gmpUpgrade php7-imapUpgrade php5-pharUpgrade php72-zlibUpgrade php72-curlUpgrade php7-fpmUpgrade php72-zipUpgrade php5-pdoUpgrade php72-fileinfoUpgrade php5-mcryptUpgrade php5-zipUpgrade php7-exifUpgrade php5-xmlreaderUpgrade php72-posixUpgrade php5-fastcgiUpgrade php72-tokenizerUpgrade apache2-mod_php7Upgrade php72-imapUpgrade php5-sysvsemUpgrade php7-sysvmsgUpgrade php7-xmlrpcUpgrade php72-pearUpgrade php7-xmlwriterUpgrade php72-sysvshmUpgrade php7-xslUpgrade php5-develUpgrade php7-sysvshmUpgrade php7Upgrade php72-odbcUpgrade php5-suhosinUpgrade php5-xslUpgrade php5-pspellUpgrade php72-ldapUpgrade php7-gdUpgrade php72-xslUpgrade php72-fastcgiUpgrade php5-pcntlUpgrade php5-sysvmsgUpgrade php7-opensslUpgrade php7-fastcgiUpgrade php5-sqliteUpgrade php7-jsonUpgrade php72-xmlwriterUpgrade php7-opcacheUpgrade php72Upgrade php72-bz2Upgrade php5-pearUpgrade php7-ctypeUpgrade php72-fpmUpgrade php5-xmlrpcUpgrade php72-mysqlUpgrade php72-domUpgrade php5-shmopUpgrade php72-intlUpgrade php7-pcntlUpgrade php5-jsonUpgrade php7-curlUpgrade php5-ldapUpgrade php7-tidyUpgrade php5-gmpUpgrade php5-mysqlUpgrade php7-mbstringUpgrade php5-soapUpgrade php7-snmpUpgrade php72-opensslUpgrade php5-gdUpgrade php72-sysvmsgUpgrade php7-fileinfoUpgrade php5-calendarUpgrade php5-xmlwriterUpgrade php7-pear-archive_tarUpgrade php7-odbcUpgrade php72-sysvsemUpgrade php5-mbstringUpgrade php72-calendarUpgrade php72-tidyUpgrade php5-zlibUpgrade php5-fpmUpgrade php72-bcmathUpgrade php7-pharUpgrade php72-gmpUpgrade php5-tokenizerUpgrade php72-soapUpgrade php7-socketsUpgrade php7-ldapUpgrade php7-zipUpgrade php72-xmlrpcUpgrade php5-snmpUpgrade php72-xmlreaderUpgrade apache2-mod_php72Upgrade php7-bz2Upgrade php5-pgsqlUpgrade php72-pcntlUpgrade php72-develUpgrade php7-pspellUpgrade php7-iconvUpgrade php5-exifUpgrade php7-bcmathUpgrade php7-pdoUpgrade php72-jsonUpgrade php7-sysvsemUpgrade php72-exifUpgrade php7-zlibUpgrade php5-curlUpgrade apache2-mod_php5Upgrade php7-readlineUpgrade php72-sodiumUpgrade php72-opcacheUpgrade php7-pearUpgrade php5-ftpUpgrade php72-ftpUpgrade php5-opcacheUpgrade php5-wddxUpgrade php72-pspellUpgrade php7-wddxUpgrade php7-gettextUpgrade php72-sqliteUpgrade php72-snmpUpgrade php72-ctypeUpgrade php5-domUpgrade php5-socketsUpgrade php7-tokenizerUpgrade php5-iconvUpgrade php5-odbcUpgrade php7-develUpgrade php72-iconvUpgrade php72-pear-archive_tarUpgrade php7-testUpgrade php7-shmopUpgrade php7-soapUpgrade php72-gdUpgrade php72-dbaUpgrade php5-enchantUpgrade php72-mbstringUpgrade php72-enchantUpgrade php7-posixUpgrade php7-sqliteUpgrade php7-calendarUpgrade php7-dbaUpgrade php7-mysqlUpgrade php5-ctypeUpgrade php5-dbaUpgrade php72-gettext | Jun 6, 2020 | May 20, 2020 |
| Ubuntu | — | Upgrade php5-cgi (Ubuntu Pro)Upgrade libapache2-mod-php7.0Upgrade libapache2-mod-php7.4Upgrade php5-fpmUpgrade php7.3-cliUpgrade php7.0-cliUpgrade php7.2-cgiUpgrade php7.2-fpmUpgrade php7.0-fpmUpgrade php5-cliUpgrade php7.4-cgiUpgrade php7.4-fpmUpgrade libapache2-mod-php5Upgrade php7.3-fpmUpgrade php7.3-cgiUpgrade libapache2-mod-php7.3Upgrade php7.2-cliUpgrade php7.0-mbstringUpgrade php5-cgiUpgrade php7.2-mbstringUpgrade php7.4-cliUpgrade php7.0-cgiUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php5-cli (Ubuntu Pro)Upgrade php7.4-mbstringUpgrade php7.3-mbstringUpgrade php5-fpm (Ubuntu Pro)Upgrade libapache2-mod-php7.2 | May 28, 2020 | May 20, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub