CVE-2023-0662: DoS vulnerability when parsing multipart request body
Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
Other sources
In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2023-0662?
CVE-2023-0662 refers to a fixed bug in PHP that caused a DOS vulnerability when parsing multipart request body.
How does CVE-2023-0662 affect PHP?
CVE-2023-0662 affects PHP versions up to and excluding 8.0.28.
What is the severity of CVE-2023-0662?
The severity of CVE-2023-0662 is not mentioned in the provided information.
How do I fix CVE-2023-0662 in PHP?
To fix CVE-2023-0662, upgrade PHP to version 8.0.28 or higher.
Where can I find more information about CVE-2023-0662?
More information about CVE-2023-0662 can be found at the following reference link: https://www.php.net/ChangeLog-8.php#8.0.28