Vulnerability details
CVE-2019-11043
Actively exploited
php php
Underflow in PHP-FPM can lead to RCE
CVSS 3.1
8.7High
Official description
In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.7High | 3.1 | CVEProject cvelistV5 (CNA) (php) | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| php | php | 7.1.x ≤ v < 7.1.33 | CVEProject cvelistV5 (CNA) |
| php | php | 7.2.x ≤ v < 7.2.24 | CVEProject cvelistV5 (CNA) |
| php | php | 7.3.x ≤ v < 7.3.11 | CVEProject cvelistV5 (CNA) |
References and advisories
28- https://github.com/neex/phuip-fpizdam x_refsource_MISC
- https://bugs.php.net/bug.php?id=78599 x_refsource_CONFIRM
- https://usn.ubuntu.com/4166-1/ vendor-advisoryx_refsource_UBUNTU
- https://www.debian.org/security/2019/dsa-4552 vendor-advisoryx_refsource_DEBIAN
- https://www.debian.org/security/2019/dsa-4553 vendor-advisoryx_refsource_DEBIAN
- https://usn.ubuntu.com/4166-2/ vendor-advisoryx_refsource_UBUNTU
- https://support.f5.com/csp/article/K75408500?utm_source=f5support&%3Butm_medium=RSS x_refsource_CONFIRM
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T62LF4ZWVV7OMMIZFO6IFO5QLZKK7YRD/ vendor-advisoryx_refsource_FEDORA
- https://security.netapp.com/advisory/ntap-20191031-0003/ x_refsource_CONFIRM
- https://access.redhat.com/errata/RHSA-2019:3286 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2019:3287 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2019:3299 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2019:3300 vendor-advisoryx_refsource_REDHAT
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W23TP6X4H7LB645FYZLUPNIRD5W3EPU/ vendor-advisoryx_refsource_FEDORA
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FSNBUSPKMLUHHOADROKNG5GDWDCRHT5M/ vendor-advisoryx_refsource_FEDORA
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00011.html vendor-advisoryx_refsource_SUSE
- https://access.redhat.com/errata/RHSA-2019:3724 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2019:3735 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2019:3736 vendor-advisoryx_refsource_REDHAT
- https://www.synology.com/security/advisory/Synology_SA_19_36 x_refsource_CONFIRM
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00014.html vendor-advisoryx_refsource_SUSE
- https://support.apple.com/kb/HT210919 x_refsource_CONFIRM
- https://seclists.org/bugtraq/2020/Jan/44 mailing-listx_refsource_BUGTRAQ
- http://seclists.org/fulldisclosure/2020/Jan/40 mailing-listx_refsource_FULLDISC
- https://access.redhat.com/errata/RHSA-2020:0322 vendor-advisoryx_refsource_REDHAT
- http://packetstormsecurity.com/files/156642/PHP-FPM-7.x-Remote-Code-Execution.html x_refsource_MISC
- https://www.tenable.com/security/tns-2021-14 x_refsource_CONFIRM
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11043 government-resource
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2019-10-28
- Last updated
- 2025-10-22
- State
- Published
- Assigner (CNA)
- php
- Kolun priority
- 88 · Critical
CISA KEV catalog
- Date added
- 2022-03-25
- Due date
- 2022-04-15
- Used in ransomware
- Yes
Exploit prediction (EPSS)
99.78%
Probability of exploitation in 30 days
99.9%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- Active
- Technical impact
- Total
Weaknesses (CWE)
- CWE-120Buffer Overflow