CVE-2020-7062

CVE Details

Release Date:	2020-02-27
Impact:	None	What is this?

Description

In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.upload_progress.cleanup is set to 0 (disabled), and the file upload fails, the upload procedure would try to clean up data that does not exist and encounter null pointer dereference, which would likely lead to a crash.

See more information about CVE-2020-7062 from MITRE CVE dictionary and NIST NVD

NOTE: The following CVSS metrics and score provided are preliminary and subject to review.

CVSS v3 metrics

Base Score:	7.5
Vector String:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Version:	3.0
Attack Vector:	Network
Attack Complexity:	Low
Privileges Required:	None
User Interaction:	None
Scope:	Unchanged
Confidentiality Impact:	None
Integrity Impact:	None
Availability Impact:	High

Errata information

Platform	Errata	Release Date
Oracle Linux version 8 (libzip)	ELSA-2020-3662	2020-09-09
Oracle Linux version 8 (php)	ELSA-2020-3662	2020-09-09
Oracle Linux version 8 (php-pear)	ELSA-2020-3662	2020-09-09
Oracle Linux version 8 (php-pecl-apcu)	ELSA-2020-3662	2020-09-09
Oracle Linux version 8 (php-pecl-rrd)	ELSA-2020-3662	2020-09-09
Oracle Linux version 8 (php-pecl-xdebug)	ELSA-2020-3662	2020-09-09
Oracle Linux version 8 (php-pecl-zip)	ELSA-2020-3662	2020-09-09