Security services, software licences and managed support from one accountable partner.

← All vulnerabilities

Not yet scored Actively exploited Used in ransomware

CVE-2019-11043

PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability

Description

In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.

Recommended action

Apply updates per vendor instructions.

CISA remediation due date for U.S. federal agencies: 15 Apr 2022.

Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.