Exposures › CVE-2019-11043

CVE-2019-11043

Severity

critical · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2022-03-25

Reference

https://nvd.nist.gov/vuln/detail/CVE-2019-11043

⚡ RCE ⌖ exploited in the wild shame 95/100 ransomwarerceexploited-in-wild

In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.

Players implicated

php · vendor FastCGI Process Manager (FPM) · product

Description

In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.