CVE-2023-0662
DoS vulnerability when parsing multipart request body
Summary
DoS vulnerability when parsing multipart request body
Original description
The description as published by the source.
In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
libphp
[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"fixed":"8.0.28"},{"introduced":"8.1.0"},{"fixed":"8.1.16"},{"introduced":"8.2.0"},{"fixed":"8.2.3"}]}]
Bitnami
php
[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"fixed":"8.0.28"},{"introduced":"8.1.0"},{"fixed":"8.1.16"},{"introduced":"8.2.0"},{"fixed":"8.2.3"}]}]
Bitnami
php-min
[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"fixed":"8.0.28"},{"introduced":"8.1.0"},{"fixed":"8.1.16"},{"introduced":"8.2.0"},{"fixed":"8.2.3"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-0662 php7.4 Fixed in: 7.4.33-1+deb11u3
References
- advisory github.com
- advisory nvd.nist.gov
- advisory security.netapp.com
- advisory github.com
- package github.com