In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop processing the request, without cleaning up temporary files created by upload request. This potentially could lead to accumulation of uncleaned temporary files exhausting the disk space on the target server.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-opcacheUpgrade php-processUpgrade php-mbstringUpgrade apcu-panelUpgrade php-soapUpgrade php-pecl-rrdUpgrade php-intlUpgrade php-pecl-apcu-develUpgrade phpUpgrade libzip-toolsUpgrade php-dbaUpgrade php-enchantUpgrade php-pgsqlUpgrade php-gdUpgrade php-gmpUpgrade libzip-develUpgrade php-cliUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-commonUpgrade php-embeddedUpgrade php-snmpUpgrade php-pecl-zipUpgrade php-pecl-apcuUpgrade php-recodeUpgrade php-pearUpgrade php-develUpgrade php-mysqlndUpgrade php-pecl-xdebugUpgrade php-xmlUpgrade php-dbgUpgrade php-odbcUpgrade php-jsonUpgrade php-fpmUpgrade libzipUpgrade php-ldapUpgrade php-bcmath | May 4, 2022 | May 20, 2020 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | May 20, 2020 |
| Amazon_linux | — | Upgrade php73Upgrade php72 | Jul 18, 2020 | May 20, 2020 |
| Centos_linux | — | Upgrade php-pecl-rrd-debugsourceUpgrade libzip-toolsUpgrade php-dbaUpgrade apcu-panelUpgrade phpUpgrade libzip-debugsourceUpgrade php-embeddedUpgrade php-ldap-debuginfoUpgrade php-xmlUpgrade libzip-develUpgrade php-snmp-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-embedded-debuginfoUpgrade php-gmp-debuginfoUpgrade php-fpm-debuginfoUpgrade php-commonUpgrade php-pecl-apcu-debuginfoUpgrade php-intlUpgrade php-recode-debuginfoUpgrade php-cliUpgrade php-pdoUpgrade libzipUpgrade php-mysqlnd-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-mbstringUpgrade php-soapUpgrade php-intl-debuginfoUpgrade php-xml-debuginfoUpgrade php-develUpgrade php-enchantUpgrade php-pgsqlUpgrade php-json-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-zipUpgrade php-xmlrpcUpgrade php-snmpUpgrade php-pecl-apcuUpgrade php-bcmathUpgrade php-dba-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-gmpUpgrade libzip-debuginfoUpgrade php-pearUpgrade php-fpmUpgrade php-gdUpgrade php-gd-debuginfoUpgrade php-dbg-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-xdebugUpgrade php-odbcUpgrade php-jsonUpgrade php-pdo-debuginfoUpgrade php-enchant-debuginfoUpgrade php-cli-debuginfoUpgrade php-pecl-apcu-develUpgrade php-soap-debuginfoUpgrade php-opcache-debuginfoUpgrade php-mysqlndUpgrade php-mbstring-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-rrdUpgrade php-recodeUpgrade php-pecl-apcu-debugsource | Sep 9, 2020 | May 20, 2020 |
| Debian | — | Upgrade php7.4 | Jun 30, 2020 | May 20, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-processUpgrade php-soapUpgrade php-xmlUpgrade php-gdUpgrade php-mysqlUpgrade php-cliUpgrade php-xmlrpcUpgrade php-recodeUpgrade php-odbcUpgrade php-ldapUpgrade php-pdoUpgrade php-pgsqlUpgrade phpUpgrade php-common | Nov 3, 2020 | May 20, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-processUpgrade php-gdUpgrade php-ldapUpgrade php-cliUpgrade phpUpgrade php-pdoUpgrade php-soapUpgrade php-recodeUpgrade php-mysqlUpgrade php-commonUpgrade php-odbcUpgrade php-pgsqlUpgrade php-xmlUpgrade php-xmlrpc | Sep 28, 2020 | May 20, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-cliUpgrade php-commonUpgrade php-ldapUpgrade php-odbcUpgrade php-xmlUpgrade php-fpmUpgrade php-xmlrpcUpgrade php-processUpgrade php-recodeUpgrade phpUpgrade php-gdUpgrade php-soapUpgrade php-pdo | Jul 31, 2020 | May 20, 2020 |
| Oracle Solaris | — | Upgrade web/php-74 to version 7.4.8-11.4.25.0.1.75.1 on Solaris 11.4Upgrade web/php-73 to version 7.3.20-11.4.25.0.1.75.1 on Solaris 11.4 | Jan 19, 2021 | May 20, 2020 |
| Oracle_linux | — | Upgrade php-dbgUpgrade libzip-toolsUpgrade php-pecl-zipUpgrade php-commonUpgrade php-bcmathUpgrade php-pecl-apcu-develUpgrade libzip-develUpgrade php-enchantUpgrade php-odbcUpgrade php-intlUpgrade libzipUpgrade php-ldapUpgrade php-mysqlndUpgrade php-pecl-apcuUpgrade php-pgsqlUpgrade phpUpgrade php-embeddedUpgrade php-opcacheUpgrade apcu-panelUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-recodeUpgrade php-pecl-xdebugUpgrade php-pecl-rrdUpgrade php-cliUpgrade php-pearUpgrade php-fpmUpgrade php-xmlUpgrade php-gmpUpgrade php-develUpgrade php-mbstringUpgrade php-processUpgrade php-soapUpgrade php-jsonUpgrade php-dbaUpgrade php-gdUpgrade php-snmp | Sep 10, 2020 | May 14, 2020 |
| Php | — | Upgrade to PHP version 7.4.6Upgrade to PHP version 7.3.18Upgrade to PHP version 7.2.31 | May 26, 2020 | May 20, 2020 |
| Redhat_linux | — | Upgrade php-pecl-rrd-debuginfoUpgrade php-bcmathUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-opcache-debuginfoUpgrade php-develUpgrade php-mbstringUpgrade php-dbg-debuginfoUpgrade php-processUpgrade php-dba-debuginfoUpgrade php-pecl-apcuUpgrade php-jsonUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-xdebugUpgrade php-fpmUpgrade php-gdUpgrade php-pecl-zipUpgrade php-xml-debuginfoUpgrade php-pearUpgrade libzip-tools-debuginfoUpgrade php-xmlUpgrade php-snmp-debuginfoUpgrade php-gmpUpgrade php-commonUpgrade php-enchant-debuginfoUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-odbc-debuginfoUpgrade php-pecl-apcu-develUpgrade php-intl-debuginfoUpgrade php-recode-debuginfoUpgrade php-pecl-rrdUpgrade php-pecl-apcu-debuginfoUpgrade libzip-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-rrd-debugsourceNo solution existsUpgrade libzip-develUpgrade php-pgsqlUpgrade php-bcmath-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-snmpUpgrade apcu-panelUpgrade php-soapUpgrade php-embedded-debuginfoUpgrade php-cli-debuginfoUpgrade php-enchantUpgrade php-pdo-debuginfoUpgrade php-soap-debuginfoUpgrade php-gd-debuginfoUpgrade php-embeddedUpgrade libzip-debugsourceUpgrade phpUpgrade libzipUpgrade php-cliUpgrade php-pecl-xdebug-debugsourceUpgrade libzip-toolsUpgrade php-recodeUpgrade php-opcacheUpgrade php-debugsourceUpgrade php-json-debuginfoUpgrade php-dbaUpgrade php-process-debuginfoUpgrade php-ldap-debuginfoUpgrade php-mysqlndUpgrade php-intlUpgrade php-debuginfoUpgrade php-ldapUpgrade php-common-debuginfoUpgrade php-gmp-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-dbgUpgrade php-pecl-apcu-debugsourceUpgrade php-odbc | Sep 9, 2020 | May 20, 2020 |
| Rocky_linux | — | Upgrade php-develUpgrade php-pecl-zip-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-mysqlnd-debuginfoUpgrade php-pgsqlUpgrade php-pgsql-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade libzip-develUpgrade php-pecl-xdebug-debuginfoUpgrade php-dba-debuginfoUpgrade php-odbcUpgrade php-enchant-debuginfoUpgrade php-json-debuginfoUpgrade php-cliUpgrade php-intlUpgrade libzip-debuginfoUpgrade php-fpmUpgrade php-snmpUpgrade php-xml-debuginfoUpgrade php-commonUpgrade php-dbgUpgrade php-pecl-apcuUpgrade php-recode-debuginfoUpgrade php-debuginfoUpgrade php-ldapUpgrade php-common-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pecl-xdebugUpgrade php-soap-debuginfoUpgrade php-xmlUpgrade php-dbaUpgrade libzipUpgrade php-gmpUpgrade php-gdUpgrade php-debugsourceUpgrade php-pdo-debuginfoUpgrade php-cli-debuginfoUpgrade php-opcacheUpgrade libzip-toolsUpgrade php-intl-debuginfoUpgrade php-mysqlndUpgrade php-dbg-debuginfoUpgrade php-pecl-zipUpgrade php-odbc-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-soapUpgrade php-processUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-rrdUpgrade php-pecl-apcu-develUpgrade php-opcache-debuginfoUpgrade php-gd-debuginfoUpgrade php-mbstringUpgrade php-ldap-debuginfoUpgrade php-snmp-debuginfoUpgrade php-enchantUpgrade php-bcmathUpgrade libzip-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-embedded-debuginfoUpgrade php-process-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-recodeUpgrade php-jsonUpgrade php-embeddedUpgrade php-pecl-apcu-debuginfoUpgrade phpUpgrade libzip-tools-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-gmp-debuginfo | Mar 12, 2024 | May 20, 2020 |
| Suse | — | Upgrade php5-develUpgrade php5-jsonUpgrade php5-shmopUpgrade php7-snmpUpgrade php5-mysqlUpgrade php5-xslUpgrade php5-pearUpgrade php72-odbcUpgrade php7-pcntlUpgrade php72-domUpgrade php72-ldapUpgrade php72-mysqlUpgrade php72-sysvshmUpgrade php72-pearUpgrade php5Upgrade php72-zlibUpgrade php5-sysvshmUpgrade php7-domUpgrade php7-gmpUpgrade php72-zipUpgrade php7-mbstringUpgrade php7-fastcgiUpgrade php72-bz2Upgrade php5-imapUpgrade php72-intlUpgrade php5-zipUpgrade php7-opensslUpgrade php5-pcntlUpgrade php5-fileinfoUpgrade php72-pdoUpgrade php7Upgrade php5-sqliteUpgrade php7-xmlreaderUpgrade php7-jsonUpgrade php7-intlUpgrade php7-gdUpgrade php7-tidyUpgrade php72-opensslUpgrade php5-gdUpgrade php72-pharUpgrade php5-suhosinUpgrade php7-curlUpgrade apache2-mod_php7Upgrade php7-sysvmsgUpgrade php7-xslUpgrade php72-imapUpgrade php5-opensslUpgrade php72-sysvmsgUpgrade php5-sysvsemUpgrade php72-curlUpgrade php5-xmlrpcUpgrade php7-fileinfoUpgrade php7-embedUpgrade php5-gmpUpgrade php72-wddxUpgrade php72-xslUpgrade php7-imapUpgrade php7-fpmUpgrade php7-sodiumUpgrade php72Upgrade php5-ldapUpgrade php5-soapUpgrade php72-fpmUpgrade php5-calendarUpgrade php7-opcacheUpgrade php72-xmlwriterUpgrade php72-pgsqlUpgrade php7-pgsqlUpgrade php72-socketsUpgrade php7-firebirdUpgrade php5-intlUpgrade php5-gettextUpgrade php7-enchantUpgrade php72-fastcgiUpgrade php5-pspellUpgrade php5-bcmathUpgrade php72-tokenizerUpgrade php72-posixUpgrade php7-xmlwriterUpgrade php72-shmopUpgrade php5-fastcgiUpgrade php5-xmlreaderUpgrade php5-bz2Upgrade php7-ctypeUpgrade php7-exifUpgrade php5-mcryptUpgrade php7-xmlrpcUpgrade php72-fileinfoUpgrade php5-posixUpgrade php5-sysvmsgUpgrade php5-pharUpgrade php7-mcryptUpgrade php7-sysvshmUpgrade php72-readlineUpgrade php7-ftpUpgrade php5-pdoUpgrade php72-xmlrpcUpgrade php7-sysvsemUpgrade php7-readlineUpgrade php72-opcacheUpgrade php72-gdUpgrade php5-exifUpgrade php72-jsonUpgrade php5-dbaUpgrade php72-bcmathUpgrade php7-shmopUpgrade php7-bcmathUpgrade php72-enchantUpgrade php7-calendarUpgrade php7-pear-archive_tarUpgrade php72-soapUpgrade php7-zlibUpgrade php72-gmpUpgrade php72-sodiumUpgrade php7-pharUpgrade apache2-mod_php5Upgrade php5-curlUpgrade php72-sysvsemUpgrade php5-ftpUpgrade php5-zlibUpgrade php5-pgsqlUpgrade php72-pcntlUpgrade php7-bz2Upgrade php72-develUpgrade php7-tokenizerUpgrade php5-odbcUpgrade php5-socketsUpgrade php5-iconvUpgrade php7-develUpgrade php72-pear-archive_tarUpgrade php72-iconvUpgrade php7-soapUpgrade php5-tokenizerUpgrade php7-mysqlUpgrade php7-iconvUpgrade php7-pdoUpgrade php72-xmlreaderUpgrade php7-odbcUpgrade php7-testUpgrade php7-dbaUpgrade php5-mbstringUpgrade php5-xmlwriterUpgrade php5-opcacheUpgrade php72-tidyUpgrade php72-calendarUpgrade php7-socketsUpgrade php72-gettextUpgrade php72-dbaUpgrade php72-pspellUpgrade php7-sqliteUpgrade php5-ctypeUpgrade php72-sqliteUpgrade php5-domUpgrade php72-snmpUpgrade php72-ctypeUpgrade php7-wddxUpgrade php7-gettextUpgrade php72-exifUpgrade php5-fpmUpgrade php5-wddxUpgrade php72-mbstringUpgrade php5-enchantUpgrade apache2-mod_php72Upgrade php72-ftpUpgrade php7-pearUpgrade php7-posixUpgrade php5-snmpUpgrade php7-pspellUpgrade php7-ldapUpgrade php7-zip | Jun 6, 2020 | May 20, 2020 |
| Ubuntu | — | Upgrade php7.3-cliUpgrade php5-fpmUpgrade libapache2-mod-php7.0Upgrade libapache2-mod-php7.4Upgrade php7.0-fpmUpgrade php5-cliUpgrade php5-cgi (Ubuntu Pro)Upgrade php7.0-cliUpgrade php7.2-fpmUpgrade php7.2-cgiUpgrade php7.4-cgiUpgrade php7.2-mbstringUpgrade php7.0-mbstringUpgrade libapache2-mod-php7.3Upgrade libapache2-mod-php7.2Upgrade php7.3-cgiUpgrade php7.0-cgiUpgrade libapache2-mod-php5Upgrade php7.4-mbstringUpgrade php5-cgiUpgrade php5-cli (Ubuntu Pro)Upgrade php7.2-cliUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php7.4-cliUpgrade php5-fpm (Ubuntu Pro)Upgrade php7.3-fpmUpgrade php7.3-mbstringUpgrade php7.4-fpm | May 28, 2020 | May 20, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub