PHP 7.2.x < 7.2.31 / 7.3.x < 7.3.18, 7.4.x < 7.4.6 Denial of Service (DoS)

Medium Nessus Plugin ID 136741

Synopsis

The version of PHP running on the remote web server is affected by a denial of service vulnerability

Description

According to its self-reported version number, the version of PHP running on the remote web server is 7.2.x prior to 7.2.31, 7.3.x prior to 7.3.18 or 7.4.x prior to 7.4.6. It is, therefore, affected by a denial of service (DoS) vulnerability in its HTTP file upload component due to a failure to clean up temporary files created during the file upload process. An unauthenticated, remote attacker can exploit this issue, by repeatedly submitting uploads with long file or field names, to exhaust disk space and cause a DoS condition.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Upgrade to PHP version 7.2.31, 7.3.18, 7.4.6 or later.

See Also

http://www.nessus.org/u?948f4dd6

http://www.nessus.org/u?a05c7b46

http://www.nessus.org/u?504e39bf

Plugin Details

Severity: Medium

ID: 136741

File Name: php_7_4_6.nasl

Version: 1.3

Type: remote

Family: CGI abuses

Published: 2020/05/21

Updated: 2020/05/27

Dependencies: 48243

Risk Information

Risk Factor: Medium

CVSS Score Source: CVE-2019-11048

CVSS v2.0

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

CVSS v3.0

Base Score: 5.3

Temporal Score: 4.6

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:php:php

Required KB Items: www/PHP, installed_sw/PHP

Exploit Ease: No known exploits are available

Patch Publication Date: 2020/05/14

Vulnerability Publication Date: 2020/05/14

Reference Information

CVE: CVE-2019-11048

IAVA: 2020-A-0221