cbcvebase.
CVE-2020-7062
published 2020-02-27

CVE-2020-7062: In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but…

PriorityP342high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
3.51%
87.7th percentile
In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.upload_progress.cleanup is set to 0 (disabled), and the file upload fails, the upload procedure would try to clean up data that does not exist and encounter null pointer dereference, which would likely lead to a crash.

Affected

17 ranges
VendorProductVersion rangeFixed in
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
debiandebian_linux
debiandebian_linux
debiandebian_linux
debianphp7.4< php7.4 7.4.3-1 (bullseye)php7.4 7.4.3-1 (bullseye)
opensuseleap
phpphp7.2.0 – 7.2.27
phpphp7.3.0 – 7.3.14
phpphp7.4.0 – 7.4.2
php5php5>= 0 < 5.5.9+dfsg-1ubuntu4.29+esm115.5.9+dfsg-1ubuntu4.29+esm11
php_groupphp>= 7.2.x < 7.2.287.2.28
php_groupphp>= 7.3.x < 7.3.157.3.15
php_groupphp>= 7.4.x < 7.4.37.4.3

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
vendor_ubuntu7.5HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.