In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.upload_progress.cleanup is set to 0 (disabled), and the file upload fails, the upload procedure would try to clean up data that does not exist and encounter null pointer dereference, which would likely lead to a crash.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-dbgUpgrade php-odbcUpgrade php-pdoUpgrade php-bcmathUpgrade php-intlUpgrade php-pecl-apcuUpgrade php-ldapUpgrade apcu-panelUpgrade php-commonUpgrade php-pgsqlUpgrade phpUpgrade php-recodeUpgrade php-fpmUpgrade php-gdUpgrade php-cliUpgrade php-embeddedUpgrade php-pecl-zipUpgrade libzip-toolsUpgrade php-mbstringUpgrade php-pecl-apcu-develUpgrade libzipUpgrade php-develUpgrade php-gmpUpgrade php-pearUpgrade php-soapUpgrade php-jsonUpgrade php-pecl-xdebugUpgrade php-opcacheUpgrade php-mysqlndUpgrade php-enchantUpgrade libzip-develUpgrade php-xmlUpgrade php-dbaUpgrade php-snmpUpgrade php-pecl-rrdUpgrade php-processUpgrade php-xmlrpc | May 4, 2022 | Feb 27, 2020 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Feb 27, 2020 |
| Amazon_linux | — | Upgrade php72Upgrade php73 | Mar 14, 2020 | Feb 27, 2020 |
| Centos_linux | — | Upgrade php-intlUpgrade php-mbstring-debuginfoUpgrade php-opcache-debuginfoUpgrade php-commonUpgrade php-cliUpgrade php-dbgUpgrade libzip-debuginfoUpgrade php-dba-debuginfoUpgrade php-soap-debuginfoUpgrade phpUpgrade php-opcacheUpgrade php-snmpUpgrade php-pgsql-debuginfoUpgrade libzip-toolsUpgrade php-xmlUpgrade libzip-develUpgrade php-common-debuginfoUpgrade php-recode-debuginfoUpgrade php-mysqlndUpgrade apcu-panelUpgrade php-json-debuginfoUpgrade php-mbstringUpgrade php-ldap-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-snmp-debuginfoUpgrade php-odbcUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-rrd-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-debuginfoUpgrade php-recodeUpgrade php-pdoUpgrade php-dbaUpgrade libzip-tools-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-ldapUpgrade php-dbg-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-rrdUpgrade php-fpm-debuginfoUpgrade php-gd-debuginfoUpgrade php-pearUpgrade php-pecl-rrd-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pgsqlUpgrade php-pecl-xdebugUpgrade php-pecl-apcuUpgrade php-gmpUpgrade php-gdUpgrade php-xml-debuginfoUpgrade php-odbc-debuginfoUpgrade php-cli-debuginfoUpgrade php-xmlrpcUpgrade php-processUpgrade php-enchantUpgrade php-process-debuginfoUpgrade php-embedded-debuginfoUpgrade php-embeddedUpgrade php-pecl-apcu-develUpgrade php-jsonUpgrade php-pecl-zipUpgrade php-debugsourceUpgrade php-gmp-debuginfoUpgrade libzip-debugsourceUpgrade php-soapUpgrade php-enchant-debuginfoUpgrade php-fpmUpgrade php-develUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade libzipUpgrade php-pecl-xdebug-debuginfoUpgrade php-bcmathUpgrade php-pecl-apcu-debuginfo | Sep 9, 2020 | Feb 27, 2020 |
| Debian | — | Upgrade php7.4 | Mar 30, 2020 | Feb 27, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Mar 27, 2020 | Feb 27, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-commonUpgrade php-soapUpgrade php-odbcUpgrade phpUpgrade php-ldapUpgrade php-pgsqlUpgrade php-xmlUpgrade php-processUpgrade php-gdUpgrade php-cliUpgrade php-mysqlUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-recode | Nov 3, 2020 | Feb 27, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-commonUpgrade php-gdUpgrade php-pgsqlUpgrade php-soapUpgrade phpUpgrade php-ldapUpgrade php-odbcUpgrade php-cliUpgrade php-recodeUpgrade php-pdoUpgrade php-xmlUpgrade php-mysqlUpgrade php-processUpgrade php-xmlrpc | Sep 28, 2020 | Feb 27, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-cliUpgrade php-commonUpgrade php-recodeUpgrade php-xmlUpgrade phpUpgrade php-fpmUpgrade php-gdUpgrade php-ldapUpgrade php-xmlrpcUpgrade php-processUpgrade php-pdoUpgrade php-odbcUpgrade php-soap | Jul 31, 2020 | Feb 27, 2020 |
| Oracle Solaris | — | Upgrade web/php-74 to version 7.4.3-11.4.21.0.1.69.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.15-11.4.20.0.1.4.0 on Solaris 11.4 | Jan 19, 2021 | Feb 27, 2020 |
| Oracle_linux | — | Upgrade php-pecl-zipUpgrade php-pgsqlUpgrade php-pecl-xdebugUpgrade apcu-panelUpgrade php-dbgUpgrade php-pdoUpgrade php-jsonUpgrade libzipUpgrade php-intlUpgrade php-cliUpgrade php-ldapUpgrade php-embeddedUpgrade php-bcmathUpgrade php-fpmUpgrade php-pearUpgrade php-xmlUpgrade php-odbcUpgrade php-gmpUpgrade phpUpgrade libzip-develUpgrade php-develUpgrade php-snmpUpgrade php-commonUpgrade php-pecl-apcuUpgrade php-enchantUpgrade php-pecl-rrdUpgrade php-pecl-apcu-develUpgrade libzip-toolsUpgrade php-mbstringUpgrade php-dbaUpgrade php-recodeUpgrade php-processUpgrade php-soapUpgrade php-opcacheUpgrade php-mysqlndUpgrade php-gdUpgrade php-xmlrpc | Sep 10, 2020 | Feb 4, 2020 |
| Php | — | Upgrade to PHP version 7.3.15Upgrade to PHP version 7.4.3Upgrade to PHP version 7.2.28 | Mar 27, 2020 | Feb 27, 2020 |
| Redhat_linux | — | Upgrade php-pecl-apcu-debuginfoUpgrade php-jsonUpgrade php-soapUpgrade php-enchantUpgrade php-pecl-apcu-debugsourceUpgrade php-processUpgrade php-fpmUpgrade php-pecl-xdebug-debuginfoUpgrade php-develUpgrade php-bcmathUpgrade php-pecl-apcu-develUpgrade php-mbstring-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade libzip-debugsourceUpgrade php-xml-debuginfoUpgrade php-dbaUpgrade php-pecl-zip-debugsourceUpgrade php-snmp-debuginfoUpgrade php-ldapUpgrade php-pecl-rrdUpgrade php-xmlrpc-debuginfoUpgrade php-cli-debuginfoUpgrade php-pecl-zipUpgrade php-pgsqlUpgrade php-gd-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pdo-debuginfoUpgrade libzip-debuginfoUpgrade php-gdUpgrade php-pdoUpgrade php-odbcUpgrade php-gmpUpgrade php-fpm-debuginfoUpgrade php-pecl-xdebugUpgrade libzipUpgrade php-json-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-odbc-debuginfoUpgrade php-mbstringUpgrade php-dba-debuginfoUpgrade php-commonUpgrade php-pecl-zip-debuginfoUpgrade php-intl-debuginfoUpgrade php-cliUpgrade php-snmpUpgrade php-opcacheUpgrade php-intlUpgrade php-bcmath-debuginfoUpgrade php-xmlUpgrade php-gmp-debuginfoUpgrade php-opcache-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-mysqlndUpgrade apcu-panelNo solution existsUpgrade php-recodeUpgrade php-debugsourceUpgrade php-recode-debuginfoUpgrade php-xmlrpcUpgrade php-enchant-debuginfoUpgrade php-embedded-debuginfoUpgrade php-ldap-debuginfoUpgrade php-common-debuginfoUpgrade libzip-toolsUpgrade libzip-develUpgrade php-pearUpgrade php-embeddedUpgrade php-dbgUpgrade php-soap-debuginfoUpgrade php-pecl-apcuUpgrade php-pecl-rrd-debugsourceUpgrade phpUpgrade php-debuginfo | Sep 9, 2020 | Feb 27, 2020 |
| Rocky_linux | — | Upgrade php-pecl-zipUpgrade php-gdUpgrade php-ldapUpgrade php-xmlrpc-debuginfoUpgrade phpUpgrade php-embeddedUpgrade php-recodeUpgrade php-pecl-apcu-debuginfoUpgrade php-opcacheUpgrade php-pdoUpgrade libzip-develUpgrade php-pecl-apcuUpgrade php-pecl-apcu-develUpgrade php-jsonUpgrade libzip-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-gmpUpgrade php-embedded-debuginfoUpgrade php-fpmUpgrade php-xmlUpgrade php-pecl-xdebug-debuginfoUpgrade php-dbaUpgrade php-soapUpgrade php-snmpUpgrade php-pgsql-debuginfoUpgrade php-cliUpgrade php-bcmathUpgrade php-processUpgrade php-recode-debuginfoUpgrade php-enchantUpgrade libzipUpgrade php-fpm-debuginfoUpgrade php-develUpgrade php-enchant-debuginfoUpgrade php-pecl-rrdUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-debugsourceUpgrade php-gd-debuginfoUpgrade php-gmp-debuginfoUpgrade php-intlUpgrade php-mysqlndUpgrade php-pecl-rrd-debugsourceUpgrade php-pdo-debuginfoUpgrade php-dbgUpgrade php-ldap-debuginfoUpgrade php-snmp-debuginfoUpgrade php-mbstringUpgrade php-opcache-debuginfoUpgrade php-pgsqlUpgrade php-pecl-rrd-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-dba-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-commonUpgrade php-xmlrpcUpgrade php-intl-debuginfoUpgrade libzip-toolsUpgrade php-pecl-xdebug-debugsourceUpgrade php-cli-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-odbc-debuginfoUpgrade php-pecl-xdebugUpgrade libzip-debuginfoUpgrade php-soap-debuginfoUpgrade php-odbcUpgrade php-mysqlnd-debuginfoUpgrade php-common-debuginfoUpgrade php-debuginfoUpgrade php-xml-debuginfoUpgrade php-dbg-debuginfoUpgrade php-json-debuginfo | Mar 12, 2024 | Feb 27, 2020 |
| Suse | — | Upgrade php5-domUpgrade php7-mbstringUpgrade php5-wddxUpgrade php7-wddxUpgrade php7-xmlwriterUpgrade php5-ctypeUpgrade php72-zipUpgrade php72-pspellUpgrade php72-gmpUpgrade php72-imapUpgrade php7-ftpUpgrade php7-develUpgrade php5-exifUpgrade php5-xslUpgrade php7-ldapUpgrade php7-tokenizerUpgrade php7-opensslUpgrade php72-tidyUpgrade php7-fpmUpgrade php72-xmlrpcUpgrade php5-sysvshmUpgrade php72-ftpUpgrade apache2-mod_php72Upgrade php7-bcmathUpgrade php72-fpmUpgrade php5-intlUpgrade php72-domUpgrade php5-xmlwriterUpgrade php5-posixUpgrade php7-pgsqlUpgrade php72-curlUpgrade php5-zlibUpgrade php72-xmlreaderUpgrade php5-opensslUpgrade php7-sysvmsgUpgrade php7-jsonUpgrade php5-gdUpgrade php72-soapUpgrade php5-zipUpgrade php5-mbstringUpgrade php72-ldapUpgrade php72-mysqlUpgrade php72-xmlwriterUpgrade php72-calendarUpgrade php72-zlibUpgrade php72-snmpUpgrade php7-socketsUpgrade php7-readlineUpgrade php72-opensslUpgrade php7-pdoUpgrade php7-posixUpgrade php5-fastcgiUpgrade php72-ctypeUpgrade php72-pear-archive_tarUpgrade php5-socketsUpgrade php72-jsonUpgrade php72-readlineUpgrade php5-sysvmsgUpgrade php72-tokenizerUpgrade php7-snmpUpgrade php7-soapUpgrade apache2-mod_php7Upgrade php5-ftpUpgrade php5-xmlrpcUpgrade php5-fileinfoUpgrade php7-ctypeUpgrade php72-fastcgiUpgrade php5-iconvUpgrade php72-iconvUpgrade php7-curlUpgrade php7-fastcgiUpgrade apache2-mod_php5Upgrade php72-gettextUpgrade php7-odbcUpgrade php5-gettextUpgrade php7-zlibUpgrade php7-shmopUpgrade php5-pearUpgrade php5-imapUpgrade php72-socketsUpgrade php7-pharUpgrade php72-sqliteUpgrade php72-odbcUpgrade php7-iconvUpgrade php7-sysvsemUpgrade php7-enchantUpgrade php5-mysqlUpgrade php5-jsonUpgrade php7-xmlreaderUpgrade php5-xmlreaderUpgrade php7-pcntlUpgrade php7-calendarUpgrade php72-sysvsemUpgrade php7-zipUpgrade php5-sysvsemUpgrade php72-gdUpgrade php72-develUpgrade php72-dbaUpgrade php72-posixUpgrade php7-opcacheUpgrade php5-fpmUpgrade php5-shmopUpgrade php72-intlUpgrade php72-pdoUpgrade php72-bcmathUpgrade php7-sodiumUpgrade php7-xslUpgrade php5-gmpUpgrade php7-exifUpgrade php72Upgrade php5-sqliteUpgrade php7-dbaUpgrade php7-intlUpgrade php5-snmpUpgrade php72-sysvmsgUpgrade php5-dbaUpgrade php5-tokenizerUpgrade php5-pharUpgrade php5-opcacheUpgrade php5-mcryptUpgrade php5-ldapUpgrade php5-calendarUpgrade php5-bz2Upgrade php5-bcmathUpgrade php5-pcntlUpgrade php5Upgrade php7-testUpgrade php72-pharUpgrade php7-tidyUpgrade php7-gettextUpgrade php5-pspellUpgrade php7-embedUpgrade php72-fileinfoUpgrade php7-xmlrpcUpgrade php7-gdUpgrade php7-mysqlUpgrade php7-gmpUpgrade php5-pdoUpgrade php7-sqliteUpgrade php72-pcntlUpgrade php5-odbcUpgrade php5-pgsqlUpgrade php72-exifUpgrade php72-pearUpgrade php5-soapUpgrade php72-opcacheUpgrade php72-sodiumUpgrade php7-fileinfoUpgrade php7-bz2Upgrade php7-domUpgrade php72-pgsqlUpgrade php72-enchantUpgrade php72-xslUpgrade php72-wddxUpgrade php7-firebirdUpgrade php5-suhosinUpgrade php7Upgrade php72-shmopUpgrade php72-mbstringUpgrade php5-develUpgrade php5-curlUpgrade php5-enchantUpgrade php72-bz2Upgrade php72-sysvshmUpgrade php7-sysvshmUpgrade php7-pear-archive_tarUpgrade php7-pear | Mar 10, 2020 | Feb 27, 2020 |
| Ubuntu | — | Upgrade php7.3-fpmUpgrade libapache2-mod-php7.2Upgrade php7.3-cliUpgrade php7.2-cgiUpgrade php5-cliUpgrade php7.0-cgiUpgrade libapache2-mod-php5Upgrade libapache2-mod-php7.3Upgrade php5-fpm (Ubuntu Pro)Upgrade libapache2-mod-php7.0Upgrade php7.2-cliUpgrade php5-cgiUpgrade php7.3-mbstringUpgrade php5-cgi (Ubuntu Pro)Upgrade php5-cli (Ubuntu Pro)Upgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php7.0-fpmUpgrade php7.2-fpmUpgrade php7.0-cliUpgrade php5-fpmUpgrade php7.3-cgiUpgrade php7.2 | Apr 16, 2020 | Feb 27, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub