CVE-2020-7062: Null Pointer Dereference in PHP Session Upload Progress
Fixed bug (Null Pointer Dereference in PHP Session Upload Progress). (CVE-2020-7062)
Other sources
In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.uploadprogress.cleanup is set to 0 (disabled), and the file upload fails, the upload procedure would try to clean up data that does not exist and encounter null pointer dereference, which would likely lead to a crash.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/rh-php73-phpto a version that resolves this vulnerability.Fixed in 0:7.3.20-1.el7 - Upgrade
Upgrade
PHPto a version that resolves this vulnerability.Fixed in 7.2.28 - Upgrade
Upgrade
debian/php7.4to a version that resolves this vulnerability.Fixed in 7.4.33-1+deb11u5Fixed in 7.4.33-1+deb11u11 - Upgrade
Upgrade
PHPto a version that resolves this vulnerability.Fixed in 7.3.15 - Upgrade
Upgrade
PHPto a version that resolves this vulnerability.Fixed in 7.4.3 - Configuration
If upload progress tracking is enabled and you set session.upload_progress.cleanup to 0 (disabled), you may trigger a crash when an upload fails; set session.upload_progress.cleanup to a non-zero value (enabled) or apply the PHP fixes.
PHP session.upload_progress.cleanup = 1
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2020-7062?
CVE-2020-7062 is a vulnerability in PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3 that can result in a null pointer dereference in PHP session upload progress.
How severe is CVE-2020-7062?
CVE-2020-7062 has a severity rating of 7.5 (high).
How can I fix CVE-2020-7062?
To fix CVE-2020-7062, you should update to PHP versions 7.2.28, 7.3.15, or 7.4.3 depending on your current version.
Where can I find more information about CVE-2020-7062?
You can find more information about CVE-2020-7062 in the PHP ChangeLog and the bug reports linked in the references.
What is the Common Weakness Enumeration (CWE) ID for CVE-2020-7062?
The Common Weakness Enumeration (CWE) ID for CVE-2020-7062 is 476.