In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.upload_progress.cleanup is set to 0 (disabled), and the file upload fails, the upload procedure would try to clean up data that does not exist and encounter null pointer dereference, which would likely lead to a crash.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade phpUpgrade php-dbgUpgrade php-odbcUpgrade php-ldapUpgrade php-bcmathUpgrade php-intlUpgrade php-pecl-apcuUpgrade php-commonUpgrade php-pdoUpgrade apcu-panelUpgrade php-pgsqlUpgrade php-pecl-rrdUpgrade php-develUpgrade php-pearUpgrade libzip-toolsUpgrade php-cliUpgrade php-embeddedUpgrade libzipUpgrade php-snmpUpgrade php-mysqlndUpgrade php-pecl-apcu-develUpgrade php-dbaUpgrade php-pecl-xdebugUpgrade php-pecl-zipUpgrade php-fpmUpgrade php-soapUpgrade php-recodeUpgrade php-opcacheUpgrade php-xmlrpcUpgrade php-gmpUpgrade php-jsonUpgrade php-gdUpgrade libzip-develUpgrade php-mbstringUpgrade php-enchantUpgrade php-processUpgrade php-xml | May 4, 2022 | Feb 27, 2020 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Feb 27, 2020 |
| Amazon_linux | — | Upgrade php72Upgrade php73 | Mar 14, 2020 | Feb 27, 2020 |
| Centos_linux | — | Upgrade php-pecl-apcu-develUpgrade php-jsonUpgrade php-pecl-zipUpgrade php-cli-debuginfoUpgrade php-embeddedUpgrade php-gmp-debuginfoUpgrade php-odbc-debuginfoUpgrade php-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-soapUpgrade php-processUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-pecl-apcu-debuginfoUpgrade libzip-debugsourceUpgrade php-pearUpgrade php-embedded-debuginfoUpgrade php-process-debuginfoUpgrade php-pdo-debuginfoUpgrade libzipUpgrade php-bcmathUpgrade php-pecl-rrdUpgrade php-fpm-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-dbaUpgrade php-gd-debuginfoUpgrade php-pecl-xdebugUpgrade php-pgsqlUpgrade php-pecl-apcuUpgrade php-dbg-debuginfoUpgrade php-gdUpgrade php-gmpUpgrade php-ldapUpgrade php-enchant-debuginfoUpgrade php-develUpgrade php-fpmUpgrade php-xmlrpc-debuginfoUpgrade php-enchantUpgrade php-pecl-apcu-debugsourceUpgrade libzip-tools-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-dba-debuginfoUpgrade php-commonUpgrade php-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-cliUpgrade php-pecl-rrd-debugsourceUpgrade php-mysqlndUpgrade php-common-debuginfoUpgrade php-ldap-debuginfoUpgrade apcu-panelUpgrade php-recode-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-snmpUpgrade php-opcache-debuginfoUpgrade phpUpgrade php-soap-debuginfoUpgrade php-recodeUpgrade php-mbstring-debuginfoUpgrade php-intl-debuginfoUpgrade php-intlUpgrade libzip-develUpgrade php-xmlUpgrade php-snmp-debuginfoUpgrade php-odbcUpgrade php-pecl-zip-debuginfoUpgrade php-opcacheUpgrade libzip-toolsUpgrade libzip-debuginfoUpgrade php-dbgUpgrade php-mbstringUpgrade php-json-debuginfo | Sep 9, 2020 | Feb 27, 2020 |
| Debian | — | Upgrade php7.4 | Mar 30, 2020 | Feb 27, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Mar 27, 2020 | Feb 27, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-cliUpgrade php-xmlUpgrade php-mysqlUpgrade php-processUpgrade php-recodeUpgrade php-gdUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-soapUpgrade php-commonUpgrade phpUpgrade php-pgsqlUpgrade php-ldapUpgrade php-odbc | Nov 3, 2020 | Feb 27, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-recodeUpgrade php-mysqlUpgrade php-xmlrpcUpgrade php-cliUpgrade php-processUpgrade php-pdoUpgrade php-xmlUpgrade php-commonUpgrade php-gdUpgrade php-soapUpgrade php-odbcUpgrade php-ldapUpgrade phpUpgrade php-pgsql | Sep 28, 2020 | Feb 27, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade phpUpgrade php-recodeUpgrade php-commonUpgrade php-xmlUpgrade php-cliUpgrade php-xmlrpcUpgrade php-ldapUpgrade php-gdUpgrade php-soapUpgrade php-fpmUpgrade php-odbcUpgrade php-pdoUpgrade php-process | Jul 31, 2020 | Feb 27, 2020 |
| Oracle Solaris | — | Upgrade web/php-74 to version 7.4.3-11.4.21.0.1.69.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.15-11.4.20.0.1.4.0 on Solaris 11.4 | Jan 19, 2021 | Feb 27, 2020 |
| Oracle_linux | — | Upgrade php-pecl-apcu-develUpgrade php-enchantUpgrade php-processUpgrade php-soapUpgrade php-gdUpgrade php-mysqlndUpgrade php-recodeUpgrade php-dbaUpgrade php-xmlrpcUpgrade php-opcacheUpgrade php-pecl-rrdUpgrade libzip-toolsUpgrade php-mbstringUpgrade phpUpgrade php-odbcUpgrade php-jsonUpgrade php-embeddedUpgrade php-pgsqlUpgrade php-bcmathUpgrade php-pecl-zipUpgrade php-pecl-xdebugUpgrade php-pdoUpgrade php-develUpgrade libzip-develUpgrade php-xmlUpgrade php-dbgUpgrade php-gmpUpgrade php-fpmUpgrade php-commonUpgrade php-intlUpgrade php-pearUpgrade php-snmpUpgrade php-pecl-apcuUpgrade php-cliUpgrade libzipUpgrade php-ldapUpgrade apcu-panel | Sep 10, 2020 | Feb 4, 2020 |
| Php | — | Upgrade to PHP version 7.4.3Upgrade to PHP version 7.2.28Upgrade to PHP version 7.3.15 | Mar 27, 2020 | Feb 27, 2020 |
| Redhat_linux | — | Upgrade php-develUpgrade php-pecl-apcu-develUpgrade php-soapUpgrade php-snmp-debuginfoUpgrade libzip-debugsourceUpgrade php-ldapUpgrade php-gd-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-mbstringUpgrade php-dbaUpgrade php-gdUpgrade php-pecl-rrd-debuginfoUpgrade php-odbcUpgrade php-odbc-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-zipUpgrade php-gmpUpgrade libzip-debuginfoUpgrade libzipUpgrade php-pecl-xdebugUpgrade php-process-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-fpmUpgrade php-pdo-debuginfoUpgrade php-enchantUpgrade php-pdoUpgrade php-jsonUpgrade php-dba-debuginfoUpgrade php-cli-debuginfoUpgrade php-json-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-processUpgrade php-pecl-rrdUpgrade php-mbstring-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pgsqlUpgrade php-bcmathUpgrade php-fpm-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pearUpgrade php-intlUpgrade php-pecl-apcuUpgrade php-recode-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-intl-debuginfoUpgrade php-common-debuginfoUpgrade php-enchant-debuginfoUpgrade php-embedded-debuginfoUpgrade php-embeddedUpgrade php-xmlUpgrade php-opcache-debuginfoUpgrade php-gmp-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-dbg-debuginfoUpgrade php-mysqlndUpgrade php-snmpUpgrade php-opcacheUpgrade phpUpgrade php-commonUpgrade php-cliUpgrade libzip-develUpgrade libzip-toolsUpgrade php-recodeUpgrade php-pgsql-debuginfoUpgrade apcu-panelNo solution existsUpgrade php-debuginfoUpgrade php-dbgUpgrade php-pecl-rrd-debugsourceUpgrade php-debugsourceUpgrade php-soap-debuginfoUpgrade php-xmlrpc | Sep 9, 2020 | Feb 27, 2020 |
| Rocky_linux | — | Upgrade php-pecl-xdebug-debugsourceUpgrade php-soap-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-process-debuginfoUpgrade php-commonUpgrade php-intl-debuginfoUpgrade libzip-toolsUpgrade php-xmlrpcUpgrade php-cli-debuginfoUpgrade php-pgsqlUpgrade php-xml-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-dba-debuginfoUpgrade php-pdo-debuginfoUpgrade php-opcache-debuginfoUpgrade php-mbstringUpgrade php-debuginfoUpgrade php-ldap-debuginfoUpgrade php-json-debuginfoUpgrade php-snmp-debuginfoUpgrade php-odbc-debuginfoUpgrade php-odbcUpgrade libzip-debuginfoUpgrade php-common-debuginfoUpgrade php-dbgUpgrade php-dbg-debuginfoUpgrade php-pecl-xdebugUpgrade php-mysqlnd-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-fpm-debuginfoUpgrade php-soapUpgrade php-mysqlndUpgrade php-pgsql-debuginfoUpgrade php-gdUpgrade php-pecl-apcu-debugsourceUpgrade php-bcmathUpgrade libzipUpgrade php-xmlUpgrade php-opcacheUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcuUpgrade php-debugsourceUpgrade php-gd-debuginfoUpgrade php-embeddedUpgrade phpUpgrade php-jsonUpgrade php-pecl-zipUpgrade php-bcmath-debuginfoUpgrade libzip-develUpgrade libzip-debugsourceUpgrade php-pecl-apcu-develUpgrade php-ldapUpgrade php-pecl-rrdUpgrade php-gmp-debuginfoUpgrade php-intlUpgrade php-xmlrpc-debuginfoUpgrade php-recodeUpgrade php-snmpUpgrade php-cliUpgrade php-pecl-xdebug-debuginfoUpgrade php-gmpUpgrade php-embedded-debuginfoUpgrade php-pdoUpgrade php-dbaUpgrade php-recode-debuginfoUpgrade php-fpmUpgrade php-enchantUpgrade php-processUpgrade php-pecl-apcu-debuginfoUpgrade php-enchant-debuginfoUpgrade php-develUpgrade php-pecl-rrd-debugsource | Mar 12, 2024 | Feb 27, 2020 |
| Suse | — | Upgrade php7-pgsqlUpgrade php72-domUpgrade php7-jsonUpgrade php72-pear-archive_tarUpgrade php5-exifUpgrade php5-intlUpgrade php7-sysvmsgUpgrade php5-ftpUpgrade php72-tokenizerUpgrade php72-jsonUpgrade php7-ctypeUpgrade php72-readlineUpgrade apache2-mod_php5Upgrade php5-iconvUpgrade php5-pearUpgrade php72-snmpUpgrade php7-snmpUpgrade php7-sysvsemUpgrade php7-fpmUpgrade php7-enchantUpgrade php7-zlibUpgrade php72-ftpUpgrade php7-wddxUpgrade php72-tidyUpgrade php5-xmlwriterUpgrade php5-posixUpgrade apache2-mod_php7Upgrade php72-imapUpgrade php72-ldapUpgrade php5-ctypeUpgrade php5-wddxUpgrade php72-gettextUpgrade php7-odbcUpgrade php5-gdUpgrade php5-domUpgrade php5-opensslUpgrade php72-calendarUpgrade php7-iconvUpgrade php72-sqliteUpgrade php5-imapUpgrade php5-fileinfoUpgrade php7-fastcgiUpgrade php5-xmlrpcUpgrade php72-pspellUpgrade php7-socketsUpgrade php72-odbcUpgrade php7-pharUpgrade php7-ftpUpgrade php72-ctypeUpgrade php72-zipUpgrade php7-bcmathUpgrade php7-tokenizerUpgrade php72-gmpUpgrade php7-soapUpgrade php72-zlibUpgrade php7-ldapUpgrade php7-opensslUpgrade php72-xmlwriterUpgrade php72-fpmUpgrade php72-fastcgiUpgrade php5-sysvshmUpgrade php7-develUpgrade php72-xmlrpcUpgrade php5-zipUpgrade php72-mysqlUpgrade php7-mbstringUpgrade php5-socketsUpgrade php72-socketsUpgrade php5-gettextUpgrade php7-curlUpgrade php7-pdoUpgrade php72-soapUpgrade apache2-mod_php72Upgrade php72-opensslUpgrade php5-fastcgiUpgrade php5-sysvmsgUpgrade php5-zlibUpgrade php7-shmopUpgrade php72-curlUpgrade php5-xslUpgrade php72-iconvUpgrade php7-posixUpgrade php7-readlineUpgrade php72-xmlreaderUpgrade php7-xmlwriterUpgrade php5-mbstringUpgrade php72-pearUpgrade php72-opcacheUpgrade php72-xslUpgrade php7-gdUpgrade php7-gmpUpgrade php5-pgsqlUpgrade php7-dbaUpgrade php7-firebirdUpgrade php7-fileinfoUpgrade php5-dbaUpgrade php72-gdUpgrade php72-sysvmsgUpgrade php72-exifUpgrade php7-intlUpgrade php7-sodiumUpgrade php7-exifUpgrade php5-enchantUpgrade php5-fpmUpgrade php7-xmlrpcUpgrade php5-pspellUpgrade php72-mbstringUpgrade php5-shmopUpgrade php72-sysvsemUpgrade php5-pharUpgrade php5-jsonUpgrade php72-develUpgrade php5-mysqlUpgrade php5-snmpUpgrade php7-domUpgrade php7-zipUpgrade php7-bz2Upgrade php5-tokenizerUpgrade php5-sysvsemUpgrade php7-pcntlUpgrade php7-calendarUpgrade php72-pdoUpgrade php5-bcmathUpgrade php5Upgrade php5-calendarUpgrade php7-testUpgrade php5-pcntlUpgrade php72-pharUpgrade php5-gmpUpgrade php7-gettextUpgrade php72-posixUpgrade php5-sqliteUpgrade php72-pgsqlUpgrade php5-soapUpgrade php72-enchantUpgrade php7-opcacheUpgrade php5-opcacheUpgrade php72-pcntlUpgrade php7-xmlreaderUpgrade php7-sqliteUpgrade php7-mysqlUpgrade php5-xmlreaderUpgrade php5-pdoUpgrade php5-odbcUpgrade php72-fileinfoUpgrade php7-embedUpgrade php5-mcryptUpgrade php7-pearUpgrade php72-wddxUpgrade php5-bz2Upgrade php72-bz2Upgrade php7Upgrade php7-xslUpgrade php7-sysvshmUpgrade php72-sysvshmUpgrade php72-bcmathUpgrade php72Upgrade php72-intlUpgrade php7-tidyUpgrade php72-shmopUpgrade php5-curlUpgrade php5-suhosinUpgrade php5-develUpgrade php7-pear-archive_tarUpgrade php5-ldapUpgrade php72-sodiumUpgrade php72-dba | Mar 10, 2020 | Feb 27, 2020 |
| Ubuntu | — | Upgrade php5-fpmUpgrade php7.3-mbstringUpgrade php5-cli (Ubuntu Pro)Upgrade php7.3-cgiUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php7.2-fpmUpgrade php7.2Upgrade php7.2-cliUpgrade php7.0-fpmUpgrade php5-cgi (Ubuntu Pro)Upgrade php5-cgiUpgrade php7.0-cliUpgrade libapache2-mod-php7.3Upgrade libapache2-mod-php7.0Upgrade php7.3-fpmUpgrade libapache2-mod-php5Upgrade libapache2-mod-php7.2Upgrade php7.0-cgiUpgrade php5-fpm (Ubuntu Pro)Upgrade php7.3-cliUpgrade php5-cliUpgrade php7.2-cgi | Apr 16, 2020 | Feb 27, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub