Vendor / Project: PHP Product: FastCGI Process Manager (FPM) Description: In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution. Required Action: Apply updates per vendor instructions. Due Date: 2022-04-15 Ransomware Campaign Use: Known CWEs: CWE-120 Notes: https://nvd.nist.gov/vuln/detail/CVE-2019-11043
CVE-2019-11043 — PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2022-03-25 00:00 UTC
- Importiert: 2026-10-20 22:46 UTC
- CVSS: 8.7
- Quelle-ID:
cisa_kev - uid_hash:
a702f7d1d5054b4f403446f589d1d690c2681f32a92a1bd7bbdaab1fb2ca9528
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
HIGH |
8.7 |
HIGH |
8.7 |
2019-10-28 |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CISA – Known Exploited Vulnerabilities (KEV) | threat_intel | cisa, kev | - | de | https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json |