CVE-2023-0662
DoS vulnerability when parsing multipart request body
概要
DoS vulnerability when parsing multipart request body
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
libphp
[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"fixed":"8.0.28"},{"introduced":"8.1.0"},{"fixed":"8.1.16"},{"introduced":"8.2.0"},{"fixed":"8.2.3"}]}]
Bitnami
php
[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"fixed":"8.0.28"},{"introduced":"8.1.0"},{"fixed":"8.1.16"},{"introduced":"8.2.0"},{"fixed":"8.2.3"}]}]
Bitnami
php-min
[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"fixed":"8.0.28"},{"introduced":"8.1.0"},{"fixed":"8.1.16"},{"introduced":"8.2.0"},{"fixed":"8.2.3"}]}]
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2023-0662 php7.4 修正版: 7.4.33-1+deb11u3
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory security.netapp.com
- advisory github.com
- package github.com