In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.upload_progress.cleanup is set to 0 (disabled), and the file upload fails, the upload procedure would try to clean up data that does not exist and encounter null pointer dereference, which would likely lead to a crash.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade phpUpgrade php-dbgUpgrade php-bcmathUpgrade php-intlUpgrade php-commonUpgrade php-ldapUpgrade php-odbcUpgrade php-pecl-apcuUpgrade apcu-panelUpgrade php-pgsqlUpgrade php-pdoUpgrade libzipUpgrade php-xmlrpcUpgrade php-opcacheUpgrade php-gmpUpgrade php-mysqlndUpgrade php-embeddedUpgrade php-cliUpgrade libzip-develUpgrade php-dbaUpgrade php-xmlUpgrade php-recodeUpgrade php-gdUpgrade php-processUpgrade php-pecl-apcu-develUpgrade php-pecl-zipUpgrade php-pearUpgrade php-mbstringUpgrade php-soapUpgrade php-pecl-rrdUpgrade php-develUpgrade php-fpmUpgrade php-snmpUpgrade php-enchantUpgrade libzip-toolsUpgrade php-pecl-xdebugUpgrade php-json | May 4, 2022 | Feb 27, 2020 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Feb 27, 2020 |
| Amazon_linux | — | Upgrade php73Upgrade php72 | Mar 14, 2020 | Feb 27, 2020 |
| Centos_linux | — | Upgrade php-mysqlnd-debuginfoUpgrade php-pecl-rrdUpgrade php-pecl-zip-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-dbaUpgrade php-process-debuginfoUpgrade php-xmlrpcUpgrade php-soapUpgrade php-dbg-debuginfoUpgrade php-gmp-debuginfoUpgrade php-embeddedUpgrade php-enchant-debuginfoUpgrade php-enchantUpgrade php-processUpgrade php-ldapUpgrade php-fpmUpgrade php-pecl-apcu-debugsourceUpgrade php-develUpgrade php-embedded-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-odbc-debuginfoUpgrade php-xml-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcuUpgrade libzipUpgrade php-pgsqlUpgrade php-gmpUpgrade php-bcmathUpgrade php-pearUpgrade php-fpm-debuginfoUpgrade php-gd-debuginfoUpgrade php-pecl-zipUpgrade libzip-debugsourceUpgrade php-pdoUpgrade php-pecl-apcu-develUpgrade php-jsonUpgrade php-gdUpgrade php-pdo-debuginfoUpgrade php-cli-debuginfoUpgrade php-pecl-xdebugUpgrade php-debugsourceUpgrade php-dbgUpgrade php-cliUpgrade libzip-debuginfoUpgrade php-mysqlndUpgrade php-common-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade phpUpgrade php-snmpUpgrade php-opcache-debuginfoUpgrade php-mbstringUpgrade php-json-debuginfoUpgrade php-debuginfoUpgrade php-dba-debuginfoUpgrade php-commonUpgrade php-bcmath-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pgsql-debuginfoUpgrade php-recode-debuginfoUpgrade php-ldap-debuginfoUpgrade apcu-panelUpgrade php-soap-debuginfoUpgrade php-recodeUpgrade php-mbstring-debuginfoUpgrade php-intl-debuginfoUpgrade php-intlUpgrade libzip-develUpgrade php-xmlUpgrade php-opcacheUpgrade php-pecl-zip-debuginfoUpgrade php-odbcUpgrade libzip-toolsUpgrade php-snmp-debuginfo | Sep 9, 2020 | Feb 27, 2020 |
| Debian | — | Upgrade php7.4 | Mar 30, 2020 | Feb 27, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Mar 27, 2020 | Feb 27, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade phpUpgrade php-commonUpgrade php-soapUpgrade php-ldapUpgrade php-pgsqlUpgrade php-odbcUpgrade php-mysqlUpgrade php-cliUpgrade php-xmlUpgrade php-gdUpgrade php-recodeUpgrade php-pdoUpgrade php-processUpgrade php-xmlrpc | Nov 3, 2020 | Feb 27, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade phpUpgrade php-ldapUpgrade php-soapUpgrade php-commonUpgrade php-odbcUpgrade php-gdUpgrade php-pgsqlUpgrade php-xmlUpgrade php-recodeUpgrade php-cliUpgrade php-pdoUpgrade php-processUpgrade php-xmlrpcUpgrade php-mysql | Sep 28, 2020 | Feb 27, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-commonUpgrade php-xmlUpgrade php-recodeUpgrade phpUpgrade php-cliUpgrade php-xmlrpcUpgrade php-gdUpgrade php-ldapUpgrade php-odbcUpgrade php-processUpgrade php-pdoUpgrade php-fpmUpgrade php-soap | Jul 31, 2020 | Feb 27, 2020 |
| Oracle Solaris | — | Upgrade web/php-74 to version 7.4.3-11.4.21.0.1.69.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.15-11.4.20.0.1.4.0 on Solaris 11.4 | Jan 19, 2021 | Feb 27, 2020 |
| Oracle_linux | — | Upgrade php-pecl-rrdUpgrade php-opcacheUpgrade php-mysqlndUpgrade php-soapUpgrade php-recodeUpgrade php-gdUpgrade php-dbaUpgrade php-enchantUpgrade php-pecl-apcu-develUpgrade php-xmlrpcUpgrade libzip-toolsUpgrade php-mbstringUpgrade php-processUpgrade libzip-develUpgrade php-intlUpgrade libzipUpgrade php-odbcUpgrade php-xmlUpgrade php-develUpgrade php-pecl-zipUpgrade php-fpmUpgrade php-dbgUpgrade php-pecl-xdebugUpgrade php-pdoUpgrade php-gmpUpgrade php-snmpUpgrade php-pecl-apcuUpgrade php-commonUpgrade php-embeddedUpgrade php-pgsqlUpgrade php-jsonUpgrade php-pearUpgrade apcu-panelUpgrade php-cliUpgrade php-ldapUpgrade phpUpgrade php-bcmath | Sep 10, 2020 | Feb 4, 2020 |
| Php | — | Upgrade to PHP version 7.2.28Upgrade to PHP version 7.4.3Upgrade to PHP version 7.3.15 | Mar 27, 2020 | Feb 27, 2020 |
| Redhat_linux | — | Upgrade php-embeddedUpgrade php-pecl-apcuUpgrade php-ldap-debuginfoUpgrade php-common-debuginfoUpgrade libzip-toolsUpgrade php-embedded-debuginfoUpgrade libzip-develUpgrade phpNo solution existsUpgrade php-intl-debuginfoUpgrade php-commonUpgrade php-intlUpgrade php-xmlrpcUpgrade php-soap-debuginfoUpgrade php-snmpUpgrade php-pearUpgrade php-enchant-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-recodeUpgrade php-dbg-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-opcache-debuginfoUpgrade apcu-panelUpgrade php-mysqlndUpgrade php-recode-debuginfoUpgrade php-debugsourceUpgrade php-cliUpgrade php-pgsql-debuginfoUpgrade php-opcacheUpgrade php-gmp-debuginfoUpgrade php-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-dbgUpgrade php-xmlUpgrade php-develUpgrade php-gmpUpgrade php-pecl-rrd-debuginfoUpgrade php-gdUpgrade php-odbcUpgrade libzip-tools-debuginfoUpgrade php-pdoUpgrade php-mbstringUpgrade php-json-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pgsqlUpgrade php-fpm-debuginfoUpgrade php-bcmathUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-xdebugUpgrade libzip-debuginfoUpgrade php-process-debuginfoUpgrade php-dba-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-zipUpgrade php-pdo-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-cli-debuginfoUpgrade php-jsonUpgrade php-dbaUpgrade php-snmp-debuginfoUpgrade php-odbc-debuginfoUpgrade php-enchantUpgrade php-soapUpgrade php-pecl-apcu-debuginfoUpgrade php-processUpgrade php-pecl-apcu-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-rrdUpgrade php-fpmUpgrade php-mysqlnd-debuginfoUpgrade php-mbstring-debuginfoUpgrade libzipUpgrade php-ldapUpgrade libzip-debugsourceUpgrade php-gd-debuginfoUpgrade php-xml-debuginfo | Sep 9, 2020 | Feb 27, 2020 |
| Rocky_linux | — | Upgrade php-enchant-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-bcmathUpgrade php-mysqlndUpgrade php-fpm-debuginfoUpgrade php-develUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-apcuUpgrade php-pecl-apcu-develUpgrade php-embeddedUpgrade php-pecl-rrdUpgrade phpUpgrade php-opcacheUpgrade php-soapUpgrade libzip-debugsourceUpgrade php-pecl-zipUpgrade php-bcmath-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-recodeUpgrade php-ldapUpgrade libzip-develUpgrade php-pdoUpgrade php-debugsourceUpgrade php-gdUpgrade libzipUpgrade php-jsonUpgrade php-xmlUpgrade php-pgsql-debuginfoUpgrade php-gd-debuginfoUpgrade php-gmp-debuginfoUpgrade php-intlUpgrade php-pecl-apcu-debuginfoUpgrade php-processUpgrade php-embedded-debuginfoUpgrade php-enchantUpgrade php-cliUpgrade php-fpmUpgrade php-recode-debuginfoUpgrade php-snmpUpgrade php-gmpUpgrade php-dbaUpgrade php-pecl-xdebug-debuginfoUpgrade php-pdo-debuginfoUpgrade php-odbcUpgrade php-opcache-debuginfoUpgrade php-debuginfoUpgrade php-dba-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pgsqlUpgrade php-xmlrpcUpgrade php-intl-debuginfoUpgrade php-commonUpgrade php-soap-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-cli-debuginfoUpgrade php-mbstringUpgrade php-mysqlnd-debuginfoUpgrade php-common-debuginfoUpgrade php-xml-debuginfoUpgrade php-snmp-debuginfoUpgrade php-ldap-debuginfoUpgrade php-json-debuginfoUpgrade php-dbgUpgrade php-dbg-debuginfoUpgrade libzip-toolsUpgrade php-odbc-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-xdebugUpgrade libzip-debuginfoUpgrade php-process-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-rrd-debuginfo | Mar 12, 2024 | Feb 27, 2020 |
| Suse | — | Upgrade php7-zipUpgrade php5-pspellUpgrade php7-dbaUpgrade php5-fpmUpgrade php72-xslUpgrade php72-gdUpgrade php72-exifUpgrade php7-domUpgrade php5-pharUpgrade php5-jsonUpgrade php5-sysvsemUpgrade php7-bz2Upgrade php72-dbaUpgrade php72-sodiumUpgrade php5-snmpUpgrade php5-tokenizerUpgrade php7-intlUpgrade php72-develUpgrade php7-testUpgrade php5-mcryptUpgrade php7-gettextUpgrade php5-shmopUpgrade php5-mysqlUpgrade php72-pearUpgrade php72-sysvsemUpgrade php72-opcacheUpgrade php7-fileinfoUpgrade php5-pcntlUpgrade php72-bcmathUpgrade php72-pharUpgrade php5-bz2Upgrade php5Upgrade php5-opcacheUpgrade php5-ldapUpgrade php7-sodiumUpgrade php7-xslUpgrade php72-intlUpgrade php72-pdoUpgrade php72Upgrade php72-sysvmsgUpgrade php5-gmpUpgrade php7-exifUpgrade php5-calendarUpgrade php7-embedUpgrade php5-soapUpgrade php72-pgsqlUpgrade php7-opcacheUpgrade php72-posixUpgrade php5-pgsqlUpgrade php72-enchantUpgrade php5-dbaUpgrade php7-firebirdUpgrade php5-curlUpgrade php7-xmlrpcUpgrade php72-wddxUpgrade php7-tidyUpgrade php5-enchantUpgrade php72-bz2Upgrade php72-mbstringUpgrade php5-suhosinUpgrade php72-shmopUpgrade php5-develUpgrade php7-pcntlUpgrade php72-sysvshmUpgrade php7-calendarUpgrade php7Upgrade php7-sysvshmUpgrade php7-gdUpgrade php5-odbcUpgrade php7-pearUpgrade php5-pdoUpgrade php7-pear-archive_tarUpgrade php5-xmlreaderUpgrade php5-bcmathUpgrade php72-pcntlUpgrade php72-fileinfoUpgrade php7-sqliteUpgrade php7-gmpUpgrade php7-xmlreaderUpgrade php7-mysqlUpgrade php5-sqliteUpgrade php7-iconvUpgrade php7-odbcUpgrade php7-posixUpgrade php5-intlUpgrade php7-sysvmsgUpgrade php72-xmlrpcUpgrade php7-ftpUpgrade php7-opensslUpgrade apache2-mod_php7Upgrade php5-fastcgiUpgrade php72-ctypeUpgrade php7-socketsUpgrade php7-soapUpgrade php72-tidyUpgrade php7-fpmUpgrade php72-tokenizerUpgrade php5-posixUpgrade php72-zipUpgrade php5-xmlwriterUpgrade php72-soapUpgrade php7-tokenizerUpgrade php5-sysvshmUpgrade php72-gmpUpgrade php7-xmlwriterUpgrade php5-ctypeUpgrade php72-ldapUpgrade php72-sqliteUpgrade php5-pearUpgrade php7-ctypeUpgrade php72-gettextUpgrade php7-shmopUpgrade php72-odbcUpgrade apache2-mod_php5Upgrade php7-pharUpgrade php7-curlUpgrade php7-fastcgiUpgrade php72-jsonUpgrade php5-gettextUpgrade php5-xmlrpcUpgrade php72-socketsUpgrade php7-zlibUpgrade php5-ftpUpgrade php72-fastcgiUpgrade apache2-mod_php72Upgrade php5-fileinfoUpgrade php5-iconvUpgrade php72-zlibUpgrade php72-ftpUpgrade php5-domUpgrade php5-zipUpgrade php7-readlineUpgrade php72-mysqlUpgrade php7-mbstringUpgrade php7-snmpUpgrade php5-wddxUpgrade php72-calendarUpgrade php7-enchantUpgrade php72-pear-archive_tarUpgrade php72-snmpUpgrade php7-pdoUpgrade php7-sysvsemUpgrade php72-opensslUpgrade php72-xmlwriterUpgrade php5-socketsUpgrade php5-imapUpgrade php72-iconvUpgrade php72-readlineUpgrade php72-domUpgrade php7-wddxUpgrade php5-exifUpgrade php5-mbstringUpgrade php5-sysvmsgUpgrade php72-fpmUpgrade php7-ldapUpgrade php72-pspellUpgrade php7-bcmathUpgrade php7-develUpgrade php5-opensslUpgrade php7-jsonUpgrade php72-curlUpgrade php5-zlibUpgrade php5-gdUpgrade php72-xmlreaderUpgrade php7-pgsqlUpgrade php72-imapUpgrade php5-xsl | Mar 10, 2020 | Feb 27, 2020 |
| Ubuntu | — | Upgrade php5-cgi (Ubuntu Pro)Upgrade php7.0-fpmUpgrade php5-cli (Ubuntu Pro)Upgrade php7.0-cliUpgrade php7.2Upgrade php7.2-cliUpgrade php5-fpmUpgrade php7.3-cgiUpgrade php5-cgiUpgrade php7.2-fpmUpgrade php7.3-mbstringUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php5-cliUpgrade php5-fpm (Ubuntu Pro)Upgrade libapache2-mod-php7.0Upgrade php7.0-cgiUpgrade php7.3-cliUpgrade php7.3-fpmUpgrade php7.2-cgiUpgrade libapache2-mod-php5Upgrade libapache2-mod-php7.3Upgrade libapache2-mod-php7.2 | Apr 16, 2020 | Feb 27, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub