Vulnerability Description
In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.upload_progress.cleanup is set to 0 (disabled), and the file upload fails, the upload procedure would try to clean up data that does not exist and encounter null pointer dereference, which would likely lead to a crash.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Php | Php | >= 7.2.0, <= 7.2.27 |
| Opensuse | Leap | 15.1 |
| Debian | Debian Linux | 8.0 |
| Canonical | Ubuntu Linux | 12.04 |
Related Weaknesses (CWE)
References
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00023.htmlMailing ListThird Party Advisory
- https://bugs.php.net/bug.php?id=79221ExploitVendor Advisory
- https://lists.debian.org/debian-lts-announce/2020/03/msg00034.htmlMailing ListThird Party Advisory
- https://security.gentoo.org/glsa/202003-57Third Party Advisory
- https://usn.ubuntu.com/4330-1/Third Party Advisory
- https://www.debian.org/security/2020/dsa-4717Third Party Advisory
- https://www.debian.org/security/2020/dsa-4719Third Party Advisory
- https://www.tenable.com/security/tns-2021-14Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00023.htmlMailing ListThird Party Advisory
- https://bugs.php.net/bug.php?id=79221ExploitVendor Advisory
- https://lists.debian.org/debian-lts-announce/2020/03/msg00034.htmlMailing ListThird Party Advisory
- https://security.gentoo.org/glsa/202003-57Third Party Advisory
- https://usn.ubuntu.com/4330-1/Third Party Advisory
- https://www.debian.org/security/2020/dsa-4717Third Party Advisory
- https://www.debian.org/security/2020/dsa-4719Third Party Advisory
FAQ
What is CVE-2020-7062?
CVE-2020-7062 is a vulnerability with a CVSS score of 7.5 (HIGH). In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.upload_progress.cleanup is set t...
How severe is CVE-2020-7062?
CVE-2020-7062 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-7062?
Check the references section above for vendor advisories and patch information. Affected products include: Php Php, Opensuse Leap, Debian Debian Linux, Canonical Ubuntu Linux.