REDHAT-BUG-1808532: Null Pointer Dereference
In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.uploadprogress.cleanup is set to 0 (disabled), and the file upload fails, the upload procedure would try to clean up data that does not exist and encounter null pointer dereference, which would likely lead to a crash.
Reference: https://bugs.php.net/bug.php?id=79221
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1808532?
The severity of REDHAT-BUG-1808532 is considered high due to potential data exposure during failed file upload attempts.
How do I fix REDHAT-BUG-1808532?
To fix REDHAT-BUG-1808532, upgrade PHP to version 7.2.28, 7.3.15, or 7.4.3 or later.
What versions are affected by REDHAT-BUG-1808532?
REDHAT-BUG-1808532 affects PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15, and 7.4.x below 7.4.3.
What are the consequences of not addressing REDHAT-BUG-1808532?
Not addressing REDHAT-BUG-1808532 may lead to improper handling of failed file uploads, which can result in data leaks.
Is it safe to disable session.upload_progress.cleanup in PHP regarding REDHAT-BUG-1808532?
Disabling session.upload_progress.cleanup is unsafe concerning REDHAT-BUG-1808532 as it can lead to residual session data after a failed upload.