Wind River Support Network

HomeDefectsLIN1021-5252

Fixed

LIN1021-5252 : Security Advisory - php - CVE-2023-0662

Created: Feb 14, 2023 Updated: Mar 15, 2023

Resolved Date: Mar 15, 2023

Found In Version: 10.21.20.1

Fix Version: 10.21.20.17

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space.

https://nvd.nist.gov/vuln/detail/CVE-2023-0662

CVEs

CVE-2023-0662