CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-11043

In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.941

EPSS Ranking 99.9%

CVSS Severity

CVSS v3 Score 8.7

CVSS v2 Score 7.5

Proposed Action

In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.

Ransomware Campaign

Known

References

Products affected by CVE-2019-11043

Php » Php » Version: 7.1.0

cpe:2.3:a:php:php:7.1.0
Php » Php » Version: 7.1.1

cpe:2.3:a:php:php:7.1.1
Php » Php » Version: 7.1.10

cpe:2.3:a:php:php:7.1.10
Php » Php » Version: 7.1.11

cpe:2.3:a:php:php:7.1.11
Php » Php » Version: 7.1.12

cpe:2.3:a:php:php:7.1.12
Php » Php » Version: 7.1.13

cpe:2.3:a:php:php:7.1.13
Php » Php » Version: 7.1.14

cpe:2.3:a:php:php:7.1.14
Php » Php » Version: 7.1.15

cpe:2.3:a:php:php:7.1.15
Php » Php » Version: 7.1.16

cpe:2.3:a:php:php:7.1.16
Php » Php » Version: 7.1.17

cpe:2.3:a:php:php:7.1.17
Php » Php » Version: 7.1.18

cpe:2.3:a:php:php:7.1.18
Php » Php » Version: 7.1.19

cpe:2.3:a:php:php:7.1.19
Php » Php » Version: 7.1.2

cpe:2.3:a:php:php:7.1.2
Php » Php » Version: 7.1.20

cpe:2.3:a:php:php:7.1.20
Php » Php » Version: 7.1.21

cpe:2.3:a:php:php:7.1.21
Php » Php » Version: 7.1.22

cpe:2.3:a:php:php:7.1.22
Php » Php » Version: 7.1.23

cpe:2.3:a:php:php:7.1.23
Php » Php » Version: 7.1.24

cpe:2.3:a:php:php:7.1.24
Php » Php » Version: 7.1.25

cpe:2.3:a:php:php:7.1.25
Php » Php » Version: 7.1.26

cpe:2.3:a:php:php:7.1.26
Php » Php » Version: 7.1.27

cpe:2.3:a:php:php:7.1.27
Php » Php » Version: 7.1.28

cpe:2.3:a:php:php:7.1.28
Php » Php » Version: 7.1.29

cpe:2.3:a:php:php:7.1.29
Php » Php » Version: 7.1.3

cpe:2.3:a:php:php:7.1.3
Php » Php » Version: 7.1.30

cpe:2.3:a:php:php:7.1.30
Php » Php » Version: 7.1.31

cpe:2.3:a:php:php:7.1.31
Php » Php » Version: 7.1.32

cpe:2.3:a:php:php:7.1.32
Php » Php » Version: 7.1.4

cpe:2.3:a:php:php:7.1.4
Php » Php » Version: 7.1.5

cpe:2.3:a:php:php:7.1.5
Php » Php » Version: 7.1.6

cpe:2.3:a:php:php:7.1.6
Php » Php » Version: 7.1.7

cpe:2.3:a:php:php:7.1.7
Php » Php » Version: 7.1.8

cpe:2.3:a:php:php:7.1.8
Php » Php » Version: 7.1.9

cpe:2.3:a:php:php:7.1.9
Php » Php » Version: 7.2.0

cpe:2.3:a:php:php:7.2.0
Php » Php » Version: 7.2.1

cpe:2.3:a:php:php:7.2.1
Php » Php » Version: 7.2.10

cpe:2.3:a:php:php:7.2.10
Php » Php » Version: 7.2.11

cpe:2.3:a:php:php:7.2.11
Php » Php » Version: 7.2.12

cpe:2.3:a:php:php:7.2.12
Php » Php » Version: 7.2.13

cpe:2.3:a:php:php:7.2.13
Php » Php » Version: 7.2.14

cpe:2.3:a:php:php:7.2.14
Php » Php » Version: 7.2.15

cpe:2.3:a:php:php:7.2.15
Php » Php » Version: 7.2.16

cpe:2.3:a:php:php:7.2.16
Php » Php » Version: 7.2.17

cpe:2.3:a:php:php:7.2.17
Php » Php » Version: 7.2.18

cpe:2.3:a:php:php:7.2.18
Php » Php » Version: 7.2.19

cpe:2.3:a:php:php:7.2.19
Php » Php » Version: 7.2.2

cpe:2.3:a:php:php:7.2.2
Php » Php » Version: 7.2.20

cpe:2.3:a:php:php:7.2.20
Php » Php » Version: 7.2.21

cpe:2.3:a:php:php:7.2.21
Php » Php » Version: 7.2.22

cpe:2.3:a:php:php:7.2.22
Php » Php » Version: 7.2.23

cpe:2.3:a:php:php:7.2.23
Php » Php » Version: 7.2.3

cpe:2.3:a:php:php:7.2.3
Php » Php » Version: 7.2.4

cpe:2.3:a:php:php:7.2.4
Php » Php » Version: 7.2.5

cpe:2.3:a:php:php:7.2.5
Php » Php » Version: 7.2.6

cpe:2.3:a:php:php:7.2.6
Php » Php » Version: 7.2.7

cpe:2.3:a:php:php:7.2.7
Php » Php » Version: 7.2.8

cpe:2.3:a:php:php:7.2.8
Php » Php » Version: 7.2.9

cpe:2.3:a:php:php:7.2.9
Php » Php » Version: 7.3.0

cpe:2.3:a:php:php:7.3.0
Php » Php » Version: 7.3.1

cpe:2.3:a:php:php:7.3.1
Php » Php » Version: 7.3.10

cpe:2.3:a:php:php:7.3.10
Php » Php » Version: 7.3.2

cpe:2.3:a:php:php:7.3.2
Php » Php » Version: 7.3.3

cpe:2.3:a:php:php:7.3.3
Php » Php » Version: 7.3.4

cpe:2.3:a:php:php:7.3.4
Php » Php » Version: 7.3.5

cpe:2.3:a:php:php:7.3.5
Php » Php » Version: 7.3.6

cpe:2.3:a:php:php:7.3.6
Php » Php » Version: 7.3.7

cpe:2.3:a:php:php:7.3.7
Php » Php » Version: 7.3.8

cpe:2.3:a:php:php:7.3.8
Php » Php » Version: 7.3.9

cpe:2.3:a:php:php:7.3.9
Redhat » Software Collections » Version: 1.0

cpe:2.3:a:redhat:software_collections:1.0
Tenable » Tenable.sc » Version: N/A

cpe:2.3:a:tenable:tenable.sc:-
Tenable » Tenable.sc » Version: 5.13.0

cpe:2.3:a:tenable:tenable.sc:5.13.0
Tenable » Tenable.sc » Version: 5.14.0

cpe:2.3:a:tenable:tenable.sc:5.14.0
Tenable » Tenable.sc » Version: 5.14.1

cpe:2.3:a:tenable:tenable.sc:5.14.1
Tenable » Tenable.sc » Version: 5.16.0

cpe:2.3:a:tenable:tenable.sc:5.16.0
Tenable » Tenable.sc » Version: 5.17.0

cpe:2.3:a:tenable:tenable.sc:5.17.0
Tenable » Tenable.sc » Version: 5.18.0

cpe:2.3:a:tenable:tenable.sc:5.18.0
Canonical » Ubuntu Linux » Version: 12.04

cpe:2.3:o:canonical:ubuntu_linux:12.04
Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Canonical » Ubuntu Linux » Version: 18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04
Canonical » Ubuntu Linux » Version: 19.04

cpe:2.3:o:canonical:ubuntu_linux:19.04
Canonical » Ubuntu Linux » Version: 19.10

cpe:2.3:o:canonical:ubuntu_linux:19.10
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Fedoraproject » Fedora » Version: 29

cpe:2.3:o:fedoraproject:fedora:29
Fedoraproject » Fedora » Version: 30

cpe:2.3:o:fedoraproject:fedora:30
Fedoraproject » Fedora » Version: 31

cpe:2.3:o:fedoraproject:fedora:31
Redhat » Enterprise Linux » Version: 8.0

cpe:2.3:o:redhat:enterprise_linux:8.0
Redhat » Enterprise Linux Desktop » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux Eus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_eus:7.7
Redhat » Enterprise Linux Eus » Version: 8.1

cpe:2.3:o:redhat:enterprise_linux_eus:8.1
Redhat » Enterprise Linux Eus » Version: 8.2

cpe:2.3:o:redhat:enterprise_linux_eus:8.2
Redhat » Enterprise Linux Eus » Version: 8.4

cpe:2.3:o:redhat:enterprise_linux_eus:8.4
Redhat » Enterprise Linux Eus » Version: 8.6

cpe:2.3:o:redhat:enterprise_linux_eus:8.6
Redhat » Enterprise Linux Eus » Version: 8.8

cpe:2.3:o:redhat:enterprise_linux_eus:8.8
Redhat » Enterprise Linux Eus Compute Node » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.7
Redhat » Enterprise Linux For Arm 64 » Version: 8.0_aarch64

cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0_aarch64
Redhat » Enterprise Linux For Arm 64 Eus » Version: 8.1_aarch64

cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.1_aarch64
Redhat » Enterprise Linux For Arm 64 Eus » Version: 8.2_aarch64

cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.2_aarch64
Redhat » Enterprise Linux For Arm 64 Eus » Version: 8.4_aarch64

cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.4_aarch64
Redhat » Enterprise Linux For Arm 64 Eus » Version: 8.6_aarch64

cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.6_aarch64
Redhat » Enterprise Linux For Arm 64 Eus » Version: 8.8_aarch64

cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.8_aarch64
Redhat » Enterprise Linux For Ibm Z Systems » Version: 6.0_s390x

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:6.0_s390x
Redhat » Enterprise Linux For Ibm Z Systems » Version: 7.0_s390x

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0_s390x
Redhat » Enterprise Linux For Ibm Z Systems » Version: 8.0_s390x

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x
Redhat » Enterprise Linux For Ibm Z Systems Eus » Version: 7.7_s390x

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.7_s390x
Redhat » Enterprise Linux For Ibm Z Systems Eus » Version: 8.1_s390x

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.1_s390x
Redhat » Enterprise Linux For Ibm Z Systems Eus » Version: 8.2_s390x

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.2_s390x
Redhat » Enterprise Linux For Ibm Z Systems Eus » Version: 8.4_s390x

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.4_s390x
Redhat » Enterprise Linux For Ibm Z Systems Eus » Version: 8.6_s390x

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.6_s390x
Redhat » Enterprise Linux For Ibm Z Systems Eus » Version: 8.8_s390x

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.8_s390x
Redhat » Enterprise Linux For Power Big Endian » Version: 6.0_ppc64

cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:6.0_ppc64
Redhat » Enterprise Linux For Power Big Endian » Version: 7.0_ppc64

cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0_ppc64
Redhat » Enterprise Linux For Power Big Endian Eus » Version: 7.7_ppc64

cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.7_ppc64
Redhat » Enterprise Linux For Power Little Endian » Version: 7.0_ppc64le

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0_ppc64le
Redhat » Enterprise Linux For Power Little Endian » Version: 8.0_ppc64le

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le
Redhat » Enterprise Linux For Power Little Endian Eus » Version: 7.7_ppc64le

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.7_ppc64le
Redhat » Enterprise Linux For Power Little Endian Eus » Version: 8.1_ppc64le

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.1_ppc64le
Redhat » Enterprise Linux For Power Little Endian Eus » Version: 8.2_ppc64le

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.2_ppc64le
Redhat » Enterprise Linux For Power Little Endian Eus » Version: 8.4_ppc64le

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.4_ppc64le
Redhat » Enterprise Linux For Power Little Endian Eus » Version: 8.6_ppc64le

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.6_ppc64le
Redhat » Enterprise Linux For Power Little Endian Eus » Version: 8.8_ppc64le

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.8_ppc64le
Redhat » Enterprise Linux For Scientific Computing » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0
Redhat » Enterprise Linux Server » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Server Aus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7
Redhat » Enterprise Linux Server Aus » Version: 8.2

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2
Redhat » Enterprise Linux Server Aus » Version: 8.4

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4
Redhat » Enterprise Linux Server Aus » Version: 8.6

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6
Redhat » Enterprise Linux Server Tus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7
Redhat » Enterprise Linux Server Tus » Version: 8.2

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2
Redhat » Enterprise Linux Server Tus » Version: 8.4

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4
Redhat » Enterprise Linux Server Tus » Version: 8.6

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6
Redhat » Enterprise Linux Server Tus » Version: 8.8

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8
Redhat » Enterprise Linux Workstation » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0
Redhat » Enterprise Linux Workstation » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-11043

Products

Pricing

Contact Us