PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability

Added March 25, 2022 • Due April 15, 2022 • CVE-2019-11043

Overdue PHP / FastCGI Process Manager (FPM) Known Ransomware Use CWE-120

Description

In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.

Required Action

Apply updates per vendor instructions.

References

https://nvd.nist.gov/vuln/detail/CVE-2019-11043

Additional Information

Catalog Version: 2025.01.24
Catalog Released: Jan. 24, 2025
Days Until Due: 0 days
Last Updated: 5 months, 1 week ago