All CVE records

CVE-2019-11043 — PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability

Known ransomware use CISA KEV listed Added March 25, 2022 Remediate by April 15, 2022

Description

In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-11043

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer