CVE-2019-11043

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://nvd.nist.gov/vuln/detail/CVE-2019-11043

Remediation deadline: April 15, 2022

Ransomware use: Known

Description

In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.

Timeline

Published:March 25th, 2022 12:00 AM

Last modified:March 25th, 2022 12:00 AM

Added to KEV:March 25th, 2022

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

PHP

Products

FastCGI Process Manager (FPM)

Weaknesses (CWE)

CWE-120

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute