CVEvulnerability
CVE-2019-11043
CISA Known Exploited Vulnerability
PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability — PHP FastCGI Process Manager (FPM)
In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.
- Added to KEV
- 2022-03-25
- Remediation due
- 2022-04-15
- Ransomware use
- Known
- Required action
- Apply updates per vendor instructions.
- Notes
- https://nvd.nist.gov/vuln/detail/CVE-2019-11043
- Status
- Analyzed
- Published
- 2019-10-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.7 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-120, CWE-787
Description
In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.
Affected configurations
• php php (>= 7.1.0 < 7.1.33)
• php php (>= 7.2.0 < 7.2.24)
• php php (>= 7.3.0 < 7.3.11)
• canonical ubuntu linux 12.04
• canonical ubuntu linux 14.04
• canonical ubuntu linux 16.04
• canonical ubuntu linux 18.04
• canonical ubuntu linux 19.04
• canonical ubuntu linux 19.10
• debian debian linux 9.0
• debian debian linux 10.0
• fedoraproject fedora 29
• fedoraproject fedora 30
• fedoraproject fedora 31
• tenable tenable.sc (< 5.19.0)
• redhat software collections 1.0
• redhat enterprise linux 8.0
• redhat enterprise linux desktop 6.0
• redhat enterprise linux desktop 7.0
• redhat enterprise linux eus 7.7
• redhat enterprise linux eus 8.1
• redhat enterprise linux eus 8.2
• redhat enterprise linux eus 8.4
• redhat enterprise linux eus 8.6
• redhat enterprise linux eus 8.8
• redhat enterprise linux eus compute node 7.7
• redhat enterprise linux for arm 64 8.0 aarch64
• redhat enterprise linux for arm 64 eus 8.1 aarch64
• redhat enterprise linux for arm 64 eus 8.2 aarch64
• redhat enterprise linux for arm 64 eus 8.4 aarch64
• redhat enterprise linux for arm 64 eus 8.6 aarch64
• redhat enterprise linux for arm 64 eus 8.8 aarch64
• redhat enterprise linux for ibm z systems 6.0 s390x
• redhat enterprise linux for ibm z systems 7.0 s390x
• redhat enterprise linux for ibm z systems 8.0 s390x
• redhat enterprise linux for ibm z systems eus 7.7 s390x
• redhat enterprise linux for ibm z systems eus 8.1 s390x
• redhat enterprise linux for ibm z systems eus 8.2 s390x
• redhat enterprise linux for ibm z systems eus 8.4 s390x
• redhat enterprise linux for ibm z systems eus 8.6 s390x
• redhat enterprise linux for ibm z systems eus 8.8 s390x
• redhat enterprise linux for power big endian 6.0 ppc64
• redhat enterprise linux for power big endian 7.0 ppc64
• redhat enterprise linux for power big endian eus 7.7 ppc64
• redhat enterprise linux for power little endian 7.0 ppc64le
• redhat enterprise linux for power little endian 8.0 ppc64le
• redhat enterprise linux for power little endian eus 7.7 ppc64le
• redhat enterprise linux for power little endian eus 8.1 ppc64le
• redhat enterprise linux for power little endian eus 8.2 ppc64le
• redhat enterprise linux for power little endian eus 8.4 ppc64le
• redhat enterprise linux for power little endian eus 8.6 ppc64le
• redhat enterprise linux for power little endian eus 8.8 ppc64le
• redhat enterprise linux for scientific computing 7.0
• redhat enterprise linux server 6.0
• redhat enterprise linux server 7.0
• redhat enterprise linux server aus 7.7
• redhat enterprise linux server aus 8.2
• redhat enterprise linux server aus 8.4
• redhat enterprise linux server aus 8.6
• redhat enterprise linux server tus 7.7
… and 6 more
Related
References
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00011.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00014.html Mailing List, Third Party Advisory
- http://packetstormsecurity.com/files/156642/PHP-FPM-7.x-Remote-Code-Execution.html Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2020/Jan/40 Mailing List, Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3286 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3287 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3299 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3300 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3724 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3735 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3736 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2020:0322 Third Party Advisory
- https://bugs.php.net/bug.php?id=78599 Exploit, Issue Tracking, Patch, Vendor Advisory
- https://github.com/neex/phuip-fpizdam Exploit, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W23TP6X4H7LB645FYZLUPNIRD5W3EPU/ Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FSNBUSPKMLUHHOADROKNG5GDWDCRHT5M/ Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T62LF4ZWVV7OMMIZFO6IFO5QLZKK7YRD/ Mailing List, Third Party Advisory
- https://seclists.org/bugtraq/2020/Jan/44 Mailing List, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20191031-0003/ Third Party Advisory
- https://support.apple.com/kb/HT210919 Third Party Advisory
- https://support.f5.com/csp/article/K75408500?utm_source=f5support&%3Butm_medium=RSS Third Party Advisory
- https://usn.ubuntu.com/4166-1/ Third Party Advisory
- https://usn.ubuntu.com/4166-2/ Third Party Advisory
- https://www.debian.org/security/2019/dsa-4552 Mailing List, Third Party Advisory
- https://www.debian.org/security/2019/dsa-4553 Mailing List, Third Party Advisory
- https://www.synology.com/security/advisory/Synology_SA_19_36 Third Party Advisory
- https://www.tenable.com/security/tns-2021-14 Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00011.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00014.html Mailing List, Third Party Advisory
- http://packetstormsecurity.com/files/156642/PHP-FPM-7.x-Remote-Code-Execution.html Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2020/Jan/40 Mailing List, Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3286 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3287 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3299 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3300 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3724 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3735 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3736 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2020:0322 Third Party Advisory
- https://bugs.php.net/bug.php?id=78599 Exploit, Issue Tracking, Patch, Vendor Advisory
- https://github.com/neex/phuip-fpizdam Exploit, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W23TP6X4H7LB645FYZLUPNIRD5W3EPU/ Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FSNBUSPKMLUHHOADROKNG5GDWDCRHT5M/ Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T62LF4ZWVV7OMMIZFO6IFO5QLZKK7YRD/ Mailing List, Third Party Advisory
- https://seclists.org/bugtraq/2020/Jan/44 Mailing List, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20191031-0003/ Third Party Advisory
- https://support.apple.com/kb/HT210919 Third Party Advisory
- https://support.f5.com/csp/article/K75408500?utm_source=f5support&%3Butm_medium=RSS Third Party Advisory
- https://usn.ubuntu.com/4166-1/ Third Party Advisory
- https://usn.ubuntu.com/4166-2/ Third Party Advisory
- https://www.debian.org/security/2019/dsa-4552 Mailing List, Third Party Advisory
- https://www.debian.org/security/2019/dsa-4553 Mailing List, Third Party Advisory
- https://www.synology.com/security/advisory/Synology_SA_19_36 Third Party Advisory
- https://www.tenable.com/security/tns-2021-14 Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11043 US Government Resource