High severity7.5NVD Advisory· Published Feb 16, 2023· Updated Jun 17, 2026

CVE-2023-0662

Description

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PHP/PHP3 versions
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:php:php:*:*:*:*:*:*:*:*range: >=8.0.0,<8.0.28
- (no CPE)range: <8.0.28, <8.1.16, <8.2.3
- (no CPE)range: 8.0.x
osv-coords76 versions
pkg:bitnami/libphp pkg:bitnami/php pkg:bitnami/php-min pkg:rpm/almalinux/apcu-panel pkg:rpm/almalinux/libzip pkg:rpm/almalinux/libzip-devel pkg:rpm/almalinux/libzip-tools pkg:rpm/almalinux/php pkg:rpm/almalinux/php-bcmath pkg:rpm/almalinux/php-cli pkg:rpm/almalinux/php-common pkg:rpm/almalinux/php-dba pkg:rpm/almalinux/php-dbg pkg:rpm/almalinux/php-devel pkg:rpm/almalinux/php-embedded pkg:rpm/almalinux/php-enchant pkg:rpm/almalinux/php-ffi pkg:rpm/almalinux/php-fpm pkg:rpm/almalinux/php-gd pkg:rpm/almalinux/php-gmp pkg:rpm/almalinux/php-intl pkg:rpm/almalinux/php-ldap pkg:rpm/almalinux/php-mbstring pkg:rpm/almalinux/php-mysqlnd pkg:rpm/almalinux/php-odbc pkg:rpm/almalinux/php-opcache pkg:rpm/almalinux/php-pdo pkg:rpm/almalinux/php-pear pkg:rpm/almalinux/php-pecl-apcu pkg:rpm/almalinux/php-pecl-apcu-devel pkg:rpm/almalinux/php-pecl-rrd pkg:rpm/almalinux/php-pecl-xdebug3 pkg:rpm/almalinux/php-pecl-zip pkg:rpm/almalinux/php-pgsql pkg:rpm/almalinux/php-process pkg:rpm/almalinux/php-snmp pkg:rpm/almalinux/php-soap pkg:rpm/almalinux/php-xml pkg:rpm/opensuse/apache2-mod_php7&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/apache2-mod_php8&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/php7&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/php7-embed&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/php7-fastcgi&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/php7-fpm&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/php7-test&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/php8&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/php8-embed&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/php8-fastcgi&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/php8-fpm&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/php8-test&distro=openSUSE%20Leap%2015.4 pkg:rpm/suse/apache2-mod_php7&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP4 pkg:rpm/suse/apache2-mod_php8&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP4 pkg:rpm/suse/php7&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/php7&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP4 pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/php7&distro=SUSE%20Manager%20Server%204.2 pkg:rpm/suse/php7-embed&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP4 pkg:rpm/suse/php7-fastcgi&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP4 pkg:rpm/suse/php7-fpm&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP4 pkg:rpm/suse/php74&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2012 pkg:rpm/suse/php74&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/php8&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP4 pkg:rpm/suse/php8-embed&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP4 pkg:rpm/suse/php8-fastcgi&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP4 pkg:rpm/suse/php8-fpm&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP4 pkg:rpm/suse/php8-test&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP4
>= 8.0.0, < 8.0.28+ 75 more
- (no CPE)range: >= 8.0.0, < 8.0.28
- (no CPE)range: >= 8.0.0, < 8.0.28
- (no CPE)range: >= 8.0.0, < 8.0.28
- (no CPE)range: < 5.1.20-1.module_el8.6.0+2739+efabdb8f
- (no CPE)range: < 1.7.3-1.module_el8.6.0+2739+efabdb8f
- (no CPE)range: < 1.7.3-1.module_el8.6.0+2739+efabdb8f
- (no CPE)range: < 1.7.3-1.module_el8.6.0+2739+efabdb8f
- (no CPE)range: < 8.0.30-1.el9_2
- (no CPE)range: < 8.0.30-1.el9_2
- (no CPE)range: < 8.0.30-1.el9_2
- (no CPE)range: < 8.0.30-1.el9_2
- (no CPE)range: < 8.0.30-1.el9_2
- (no CPE)range: < 8.0.30-1.el9_2
- (no CPE)range: < 8.0.30-1.el9_2
- (no CPE)range: < 8.0.30-1.el9_2
- (no CPE)range: < 8.0.30-1.el9_2
- (no CPE)range: < 8.0.30-1.el9_2
- (no CPE)range: < 8.0.30-1.el9_2
- (no CPE)range: < 8.0.30-1.el9_2
- (no CPE)range: < 8.0.30-1.el9_2
- (no CPE)range: < 8.0.30-1.el9_2
- (no CPE)range: < 8.0.30-1.el9_2
- (no CPE)range: < 8.0.30-1.el9_2
- (no CPE)range: < 8.0.30-1.el9_2
- (no CPE)range: < 8.0.30-1.el9_2
- (no CPE)range: < 8.0.30-1.el9_2
- (no CPE)range: < 8.0.30-1.el9_2
- (no CPE)range: < 1:1.10.13-1.module_el8.6.0+2739+efabdb8f
- (no CPE)range: < 5.1.20-1.module_el8.6.0+2739+efabdb8f
- (no CPE)range: < 5.1.20-1.module_el8.6.0+2739+efabdb8f
- (no CPE)range: < 2.0.3-1.module_el8.6.0+2739+efabdb8f
- (no CPE)range: < 3.1.2-1.module_el8.6.0+2739+efabdb8f
- (no CPE)range: < 1.19.2-1.module_el8.6.0+2739+efabdb8f
- (no CPE)range: < 8.0.30-1.el9_2
- (no CPE)range: < 8.0.30-1.el9_2
- (no CPE)range: < 8.0.30-1.el9_2
- (no CPE)range: < 8.0.30-1.el9_2
- (no CPE)range: < 8.0.30-1.el9_2
- (no CPE)range: < 7.4.33-150400.4.19.1
- (no CPE)range: < 8.0.28-150400.4.26.1
- (no CPE)range: < 7.4.33-150200.3.51.1
- (no CPE)range: < 7.4.33-150400.4.19.1
- (no CPE)range: < 7.4.33-150400.4.19.1
- (no CPE)range: < 7.4.33-150400.4.19.1
- (no CPE)range: < 7.4.33-150400.4.19.1
- (no CPE)range: < 8.0.28-150400.4.26.1
- (no CPE)range: < 8.0.28-150400.4.26.1
- (no CPE)range: < 8.0.28-150400.4.26.1
- (no CPE)range: < 8.0.28-150400.4.26.1
- (no CPE)range: < 8.0.28-150400.4.26.1
- (no CPE)range: < 7.4.33-150400.4.19.1
- (no CPE)range: < 8.0.28-150400.4.26.1
- (no CPE)range: < 7.4.33-150200.3.51.1
- (no CPE)range: < 7.4.33-150200.3.51.1
- (no CPE)range: < 7.2.34-150000.4.109.1
- (no CPE)range: < 7.4.33-150200.3.51.1
- (no CPE)range: < 7.4.33-150200.3.51.1
- (no CPE)range: < 7.4.33-150200.3.51.1
- (no CPE)range: < 7.4.33-150400.4.19.1
- (no CPE)range: < 7.2.34-150000.4.109.1
- (no CPE)range: < 7.4.33-150200.3.51.1
- (no CPE)range: < 7.4.33-150200.3.51.1
- (no CPE)range: < 7.2.34-150000.4.109.1
- (no CPE)range: < 7.4.33-150200.3.51.1
- (no CPE)range: < 7.4.33-150200.3.51.1
- (no CPE)range: < 7.4.33-150200.3.51.1
- (no CPE)range: < 7.4.33-150400.4.19.1
- (no CPE)range: < 7.4.33-150400.4.19.1
- (no CPE)range: < 7.4.33-150400.4.19.1
- (no CPE)range: < 7.4.33-1.53.1
- (no CPE)range: < 7.4.33-1.53.1
- (no CPE)range: < 8.0.28-150400.4.26.1
- (no CPE)range: < 8.0.28-150400.4.26.1
- (no CPE)range: < 8.0.28-150400.4.26.1
- (no CPE)range: < 8.0.28-150400.4.26.1
- (no CPE)range: < 8.0.28-150400.4.26.1

Patches

Vulnerability mechanics

References

github.com/php/php-src/security/advisories/GHSA-54hq-v5wp-fqgvnvdThird Party Advisory
security.netapp.com/advisory/ntap-20230517-0001/nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000