DEBIAN-CVE-2023-0662

DEBIAN-CVE-2023-0662 PUBLISHED CVSS 7.5 HIGH

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space.

Risk Scores

CVSS v3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
Debian:11	php7.4	7.4.33-1+deb11u1, 7.4.26-1, 7.4.28-1+deb11u1
Debian:12	php8.2	0, 0, 0

Timeline

Feb 16, 2023 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2023-0662 advisory

Open in Interactive Console →