CVE-2019-11043
KEV · RansomwarePHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability
View CVE record →- Vendor / Project
- PHP
- Product
- FastCGI Process Manager (FPM)
- Date added
- Mar 25, 2022
- Due date
- Apr 15, 2022
- Known ransomware use
- Known
- CWEs
- CWE-120
Description
In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.
Required action
Apply updates per vendor instructions.