PT-2020-5322 · Php+7 · Php+7

Published

2020-02-17

·

Updated

2025-08-11

·

CVE-2020-7062

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions PHP versions 7.2.x through 7.2.27 PHP versions 7.3.x through 7.3.14 PHP versions 7.4.x through 7.4.2
Description The issue is related to a null pointer dereference when using file upload functionality in PHP. If upload progress tracking is enabled but session.upload progress.cleanup is set to 0, and the file upload fails, the upload procedure attempts to clean up non-existent data, leading to a crash. This could allow a remote attacker to cause a denial of service.
Recommendations For PHP versions 7.2.x through 7.2.27, update to version 7.2.28 or later to resolve the issue. For PHP versions 7.3.x through 7.3.14, update to version 7.3.15 or later to resolve the issue. For PHP versions 7.4.x through 7.4.2, update to version 7.4.3 or later to resolve the issue. As a temporary workaround, consider disabling upload progress tracking or setting session.upload progress.cleanup to a non-zero value until a patch is available.

Exploit

Fix

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2020:3662
ALT-PU-2020-1304
ALT-PU-2020-1385
BDU:2021-00098
BIT-LIBPHP-2020-7062
BIT-PHP-2020-7062
BIT-PHP-MIN-2020-7062
CESA-2020_3662
CVE-2020-7062
DLA-2160-1
DSA-4717-1
DSA-4719-1
MGASA-2020-0119
OESA-2021-1018
OPENSUSE-SU-2020:0341-1
OPENSUSE-SU-2020_0341-1
OPENSUSE-SU-2022_4067-1
OPENSUSE-SU-2024:11167-1
OPENSUSE-SU-2024:11169-1
RHSA-2020:3662
RHSA-2020:5275
RHSA-2020_3662
RLSA-2020:3662
SUSE-SU-2020:0622-1
SUSE-SU-2020:0647-1
SUSE-SU-2020:0658-1
SUSE-SU-2020_0647-1
SUSE-SU-2020_0658-1
SUSE-SU-2022:4067-1
USN-4330-1

Affected Products

Alt Linux
Almalinux
Centos
Php
Red Hat
Rocky Linux
Suse
Ubuntu