REDHAT-BUG-2170761
First published: Fri Feb 17 2023(Updated: )
In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space. <a href="https://github.com/php/php-src/security/advisories/GHSA-54hq-v5wp-fqgv">https://github.com/php/php-src/security/advisories/GHSA-54hq-v5wp-fqgv</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| PHP | <8.0.28 | |
| PHP | <8.1.16 | |
| PHP | <8.2.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/php/php-src/security/advisories/GHSA-54hq-v5wp-fqgv
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2170777
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2170778
- https://access.redhat.com/errata/RHSA-2023:5926
- https://access.redhat.com/errata/RHSA-2023:5927
- https://access.redhat.com/errata/RHSA-2024:0387
- https://bugzilla.redhat.com/show_bug.cgi?id=2170761
Frequently Asked Questions
What is the severity of REDHAT-BUG-2170761?
The severity of REDHAT-BUG-2170761 is high due to potential denial of service caused by excessive resource consumption.
How do I fix REDHAT-BUG-2170761?
To fix REDHAT-BUG-2170761, upgrade your PHP versions to 8.0.28, 8.1.16, or 8.2.3 or later.
Which versions of PHP are affected by REDHAT-BUG-2170761?
PHP versions 8.0.X before 8.0.28, 8.1.X before 8.1.16, and 8.2.X before 8.2.3 are affected by REDHAT-BUG-2170761.
What causes the issue in REDHAT-BUG-2170761?
The issue in REDHAT-BUG-2170761 is caused by an excessive number of parts in HTTP form uploads, leading to resource exhaustion.
Can REDHAT-BUG-2170761 lead to server downtime?
Yes, REDHAT-BUG-2170761 can lead to server downtime due to denial of service from CPU or disk space exhaustion.
- agent/type
- agent/first-publish-date
- agent/severity
- agent/description
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2023-0662
- agent/last-modified-date
- agent/references
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/php
- canonical/php