Recommended action window: Monitor and triage in normal cycle
NVD description
In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.upload_progress.cleanup is set to 0 (disabled), and the file upload fails, the upload procedure would try to clean up data that does not exist and encounter null pointer dereference, which would likely lead to a crash.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
9 versions affected across 4 products
i'm turning off one specific php setting that was added in 5.4 and is on by default. 2012: PHP 5.4 adds it, on by default 2018: a CTF trick turns it into code execution, with one small file-include bug 2020: CVE-2020-7062, a crash 2021: a public exploit, reverse shell included PHP's own manual says to consider disabling it. ‼️
10 of 10 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | canonical | ubuntu_linux | 12.04 | - | - |
| OS | canonical | ubuntu_linux | 14.04 | - | - |
| OS | canonical | ubuntu_linux | 16.04 | - | - |
| OS | canonical | ubuntu_linux | 18.04 | - | - |
| OS | canonical | ubuntu_linux | 19.10 | - | - |
| OS | debian | debian_linux | 10.0 | - | - |
| OS | debian | debian_linux | 8.0 | - | - |
| OS | debian | debian_linux | 9.0 | - | - |
| OS | opensuse | leap | 15.1 | - | - |
| App | php | php | - | - | - |